Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: XgDtLwkOBpXaPJLqRIMihuj0pbLN0sS0qOc1iAPXCb8=
Subject key identifier: 03:49:40:22:83:84:66:C3:FE:11:A4:3B:E7:B9:A3:8E:0B:61:BD:13
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019951FAD770F864197A18107AA366B58E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 0FB8
Signing time: Tue 16 Sep 2025 10:03:37 +0000
Manifest this update: Tue 16 Sep 2025 10:03:37 +0000
Manifest next update: Wed 17 Sep 2025 10:03:37 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: LdbJbRoPIXM8dDs3bZ9Z1S0kxi9f0zte079CEwJ0E/Y=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:fa:d7:70:f8:64:19:7a:18:10:7a:a3:66:b5:8e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Sep 16 10:03:37 2025 GMT
Not After : Sep 17 10:03:37 2025 GMT
Subject: CN=03494022838466c3fe11a43be7b9a38e0b61bd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:72:6a:62:54:62:88:99:fb:8e:9f:e5:4f:
a4:14:23:4d:cb:1a:81:f3:ce:14:63:93:90:29:ab:
f8:0f:b0:a1:4d:f7:4f:5c:1d:61:0e:54:a5:b7:99:
d4:8b:23:d8:8a:e4:a0:f8:6f:27:b1:b2:ff:c7:a1:
0f:c7:0d:6c:3a:1a:d3:b8:7b:f5:2a:df:3f:62:b8:
38:57:f2:f6:b9:90:44:b8:61:1c:56:5a:ff:c7:99:
f5:2e:38:12:44:d0:34:dd:c1:13:87:f8:ae:ce:d6:
31:20:2e:cc:fe:0a:6d:a5:e2:4c:81:20:70:28:8b:
31:0f:f0:31:0e:55:f2:60:da:e8:18:9b:04:5e:ff:
a6:4f:56:55:b8:e6:bc:09:8d:c9:37:2e:9b:54:b9:
11:d7:b5:25:10:32:28:75:6a:14:0d:e0:d3:cf:52:
6f:ab:87:60:78:7e:76:14:dc:52:b3:80:32:3f:e6:
1f:b8:41:93:41:42:b0:cd:d0:fd:11:74:a7:87:e4:
fb:9a:fb:e7:1d:e9:4c:c5:9b:36:cb:1b:38:22:07:
18:72:74:ee:cf:aa:49:42:c3:ff:dc:01:e7:f2:d0:
4e:d8:1e:af:82:44:60:76:9a:7d:2a:6e:18:b1:25:
cd:e1:40:a7:e8:36:02:c4:ed:6e:47:bb:23:65:6f:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:40:22:83:84:66:C3:FE:11:A4:3B:E7:B9:A3:8E:0B:61:BD:13
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:a2:bb:fa:db:fd:15:46:f7:83:d3:17:fd:27:36:8d:2b:
1c:d4:b3:96:e3:41:4a:c3:d2:2e:4d:8d:d9:52:04:e8:19:bd:
2b:be:d8:80:03:64:90:bd:48:ff:28:0a:7e:12:9b:fb:07:58:
37:eb:a2:82:d7:d9:ca:77:97:c4:85:2f:1b:ca:1e:b6:bb:34:
96:e5:83:03:87:a3:bc:2e:79:16:8c:54:93:be:c9:c2:c0:a6:
d8:d6:17:cb:9f:3b:ec:6c:7b:c6:48:67:a2:58:fb:01:5d:1b:
10:23:0c:1d:6c:5a:54:14:d2:8a:8f:2a:39:a8:d3:70:c8:4e:
f8:55:c8:09:80:e6:26:22:47:27:77:b6:9b:fb:b9:f1:35:14:
31:73:e0:e6:91:9f:4a:06:b5:3e:b5:73:19:1d:64:f3:2a:43:
38:b1:19:90:c9:ef:c9:00:eb:65:1a:0e:8f:0a:e9:da:81:f8:
dc:9a:66:52:e9:12:50:07:a9:b5:a9:a7:c0:6f:8d:f7:a8:a4:
19:a9:45:41:3a:7d:52:50:24:20:47:a0:3d:3c:b9:9b:fa:b1:
40:d4:75:54:8e:d2:5b:7d:8d:01:1f:4f:8a:64:8d:4b:4d:0e:
8f:50:09:79:1e:3a:22:f5:6f:63:ee:9d:32:2b:25:f8:35:c6:
9d:24:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:32:18 2025 by rpki-client