Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: vwFozZUUosV4QfiI8GEl7OlhuoIg1e3dS/QwstXtgzE=
Subject key identifier: 35:DE:CD:A6:DC:EB:56:25:03:7C:BA:35:D0:AC:C8:63:47:AC:9A:03
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 0199239F10E947B077D5D90FFA0C4784B866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0610
Signing time: Sun 07 Sep 2025 10:00:51 +0000
Manifest this update: Sun 07 Sep 2025 10:00:51 +0000
Manifest next update: Mon 08 Sep 2025 10:00:51 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: wO8MlrZiJFXSTLTDGMG/OPtQbX/9MAAGg/Sa6MJ9xNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:10:e9:47:b0:77:d5:d9:0f:fa:0c:47:84:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Sep 7 10:00:51 2025 GMT
Not After : Sep 8 10:00:51 2025 GMT
Subject: CN=35decda6dceb5625037cba35d0acc86347ac9a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:7b:7a:ae:1d:08:fb:0b:8b:9f:63:85:3d:
54:ef:a1:1f:83:d4:33:7c:2d:a3:85:25:37:8d:8e:
28:45:1d:06:d1:95:f3:7f:3d:fe:5a:50:2c:31:bd:
31:46:69:d2:a6:9d:7e:6c:ce:7a:34:20:61:87:2a:
af:32:1f:8d:f4:a4:80:1a:52:42:d6:5c:c5:44:c2:
63:2b:f9:0a:96:f8:47:ce:b8:c4:f5:f5:63:2e:84:
0c:ef:68:c3:6a:d2:04:40:ee:f2:41:d5:7a:c0:0e:
a5:66:a2:26:f5:be:2b:4b:4c:1b:83:50:dd:99:02:
b5:00:ba:65:c3:f9:e0:d3:e6:df:d8:11:09:b1:28:
42:56:a4:c1:ec:e0:f0:6f:35:b7:8b:fe:f1:46:82:
36:48:c2:e6:d1:1d:d4:8b:35:02:8c:64:b5:0c:63:
8e:32:c7:1b:33:85:81:3c:1b:b4:d6:d7:9e:9c:b7:
1e:b9:0e:a9:66:ae:35:6e:c2:c0:18:e0:2a:c6:11:
b2:6e:c6:1c:3c:9b:44:3c:3d:9a:fa:52:04:74:72:
c7:5f:88:5d:1f:24:3d:9b:38:9e:70:1f:2b:d0:16:
77:21:78:0a:74:f2:89:de:b1:b7:da:bf:4a:2c:04:
4b:d0:13:96:93:ba:1c:15:d8:c8:70:b4:01:59:43:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:CD:A6:DC:EB:56:25:03:7C:BA:35:D0:AC:C8:63:47:AC:9A:03
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:69:e9:09:3b:97:b1:e4:94:72:ba:40:ad:71:98:ea:4b:33:
a5:d5:84:f5:29:6e:f2:48:e9:19:96:df:e7:21:44:63:32:bd:
d7:10:e3:ab:b5:a8:28:a0:07:be:d3:29:4c:25:c4:9e:d8:d3:
ef:1e:ce:b0:18:47:83:12:0d:48:98:19:a2:84:e0:60:2f:a6:
11:67:2c:8e:7a:43:cb:04:e8:c8:5b:fc:79:14:e7:e6:13:bd:
24:55:76:3f:a8:05:13:da:07:a5:78:1a:68:1f:35:4a:4e:23:
9e:ee:fc:06:37:bd:dd:5e:d5:f6:06:76:69:b0:dd:be:43:e7:
20:9d:5c:de:61:e0:8e:2c:e4:0e:fb:c7:09:3d:6a:f5:3d:ba:
01:ef:6e:3e:1e:95:1b:95:d6:d6:da:37:f1:b5:05:61:ff:c0:
97:6e:ae:ae:a9:bb:f7:3b:ae:71:c5:f5:07:1e:1c:a8:ad:92:
ef:4e:52:74:b4:85:d6:e6:32:fb:98:c4:54:55:6b:0a:63:47:
07:9e:ea:89:9d:f5:26:a7:1f:2c:06:85:b1:34:56:09:4b:76:
a0:9d:56:56:a0:b5:73:6d:cb:38:2d:ea:2b:78:f4:f9:ff:0c:
b7:80:f5:a5:a9:b5:73:a6:a4:12:8d:d5:84:78:c3:37:c8:cd:
44:a3:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:37 2025 by rpki-client