Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: rDl8oNKmkXq13JTC+rLInEV9GcXL9eyfFcZDwfpbA+U=
Subject key identifier: B4:E2:DE:06:CA:71:9A:BD:44:D5:70:E7:5C:E6:23:F9:30:BD:DD:BE
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019922C37A4724A2CC08B872E3431B26E0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 1039
Signing time: Sun 07 Sep 2025 06:01:00 +0000
Manifest this update: Sun 07 Sep 2025 06:01:00 +0000
Manifest next update: Mon 08 Sep 2025 06:01:00 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: XHK1hG0duPc7UkM4Y8CZ/curNXLThT/tVYTRABXFdrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7a:47:24:a2:cc:08:b8:72:e3:43:1b:26:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Sep 7 06:01:00 2025 GMT
Not After : Sep 8 06:01:00 2025 GMT
Subject: CN=b4e2de06ca719abd44d570e75ce623f930bdddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:61:a3:eb:7a:fc:29:33:14:55:3f:5e:f7:
99:ac:8a:40:7e:6d:b5:66:0b:4c:77:b1:e7:23:f1:
c3:97:ef:d0:da:f3:c1:6a:dc:54:b4:5b:12:2e:aa:
c8:9d:38:05:0f:52:2e:70:b9:06:a9:23:3e:93:95:
42:e2:ff:71:c6:92:e4:ec:43:79:99:98:ed:39:25:
e7:1b:d7:53:e3:a2:c7:97:ef:b6:a2:08:2a:62:ab:
cc:ee:c1:ab:fd:17:69:41:2d:d2:55:25:02:77:85:
72:9b:19:9f:1e:47:3b:c9:b9:05:1b:62:3d:05:83:
77:3c:ec:e2:8f:e6:17:3e:7c:78:85:0c:00:f4:62:
50:3a:af:f9:62:3a:72:3f:38:45:74:df:1c:e7:06:
83:53:22:1b:58:9a:90:14:55:aa:b3:8b:cb:50:36:
80:f4:a5:c6:a4:e9:42:18:92:cc:a4:f6:03:21:f7:
a0:12:f3:b2:dc:b1:d8:12:98:f6:5d:ab:11:2e:bf:
a5:c3:53:49:66:55:d6:ae:7f:de:8d:4a:88:c7:f7:
28:af:c4:f2:14:dd:50:9c:0d:74:8f:8a:27:ff:8f:
70:12:42:7b:8d:c2:f7:00:39:9f:f8:aa:e3:f2:c5:
4c:88:60:6a:32:a1:8f:28:50:84:eb:21:74:5a:7f:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:DE:06:CA:71:9A:BD:44:D5:70:E7:5C:E6:23:F9:30:BD:DD:BE
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:20:4b:89:98:f4:19:d5:d3:93:91:74:2f:ee:d3:47:9d:
a1:7b:39:be:82:45:f7:33:33:af:b5:eb:77:a1:8f:b9:fb:2b:
39:49:eb:e3:aa:f3:ef:e4:ca:13:51:b9:46:42:09:40:85:72:
3c:db:2f:05:c9:86:25:f0:3c:53:8f:2a:7f:f3:91:a3:62:6e:
b7:64:04:4e:28:a6:30:b0:48:f0:77:d8:8e:9b:29:4c:8b:77:
1d:ed:23:b0:c1:27:0b:41:61:b8:5a:4e:01:4e:f3:21:95:c3:
60:80:17:26:34:0c:08:5a:93:d2:83:d8:5b:5e:df:98:e8:66:
03:d5:d0:57:a2:36:de:f5:5f:0c:f0:b4:0d:b6:d0:19:d5:ce:
fa:f1:e6:4d:10:b1:a2:d2:d0:36:61:96:07:40:d0:5a:67:49:
eb:5d:af:00:7a:42:5b:2b:0a:bf:e7:b6:a7:c5:38:4a:e1:44:
f3:f8:c2:27:95:b0:1b:7a:42:0b:d7:00:12:cb:0d:69:fd:0f:
6c:51:a8:09:c4:5d:45:e3:94:c4:6e:a4:3f:cd:e1:e4:64:6b:
b9:18:37:c1:2b:23:73:d0:6e:60:21:1e:16:17:6f:f7:f1:5e:
ee:d9:b7:c8:56:e0:d4:c6:9b:1d:42:87:2e:3b:1c:c8:0a:da:
8a:e2:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:29 2025 by rpki-client