Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: pV4vhluHULR/wpmguHLc3w9ADVYOC8IzQMSmLIWpFLU=
Subject key identifier: D0:B9:55:BC:E7:DB:81:E4:60:61:BD:90:28:28:C0:71:C9:92:23:27
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0199345C2230F159D3BCD1E43CC5CF52C9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1684
Signing time: Wed 10 Sep 2025 16:01:17 +0000
Manifest this update: Wed 10 Sep 2025 16:01:17 +0000
Manifest next update: Thu 11 Sep 2025 16:01:17 +0000
Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: qPMtV5PXsbcSHboGpQkp1ctrmB/NEua9tiX4EYloYig=)
5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:22:30:f1:59:d3:bc:d1:e4:3c:c5:cf:52:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Sep 10 16:01:17 2025 GMT
Not After : Sep 11 16:01:17 2025 GMT
Subject: CN=d0b955bce7db81e46061bd902828c071c9922327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:c3:f7:6c:38:20:cf:f7:23:09:8e:43:77:
b3:cf:f5:d7:9a:25:2e:d1:7e:ff:00:0c:0b:a1:b9:
2c:21:75:08:09:73:52:3c:c8:59:3a:b9:ae:cc:eb:
18:42:69:69:e2:4b:f1:4c:8b:9c:31:e3:dc:20:05:
e0:7f:49:03:fb:5e:43:d3:5a:d6:45:77:53:32:b2:
4c:ac:49:5c:cd:e7:bf:75:7e:19:5d:48:29:c7:b3:
ed:f8:4a:42:cb:1f:05:27:22:1b:e2:78:fe:fd:12:
9a:d8:7f:f6:87:e4:74:ad:9d:1c:0f:fd:f8:7e:b3:
aa:54:ae:82:0f:99:a0:53:a3:f4:98:65:91:9e:aa:
d8:89:04:b2:05:a6:fb:dc:d2:3a:09:08:4b:66:1f:
74:6a:5c:f4:8b:5d:44:02:56:85:6a:38:86:fa:a9:
c6:d2:a4:3a:01:c8:4c:b1:b2:7f:5d:8e:c1:11:c6:
86:98:05:45:d0:b7:08:84:23:af:b3:88:af:96:33:
fb:13:d6:94:07:4a:0f:9f:cd:a1:50:d6:07:51:fa:
96:98:d8:eb:9e:6e:d5:47:08:3b:9b:de:19:42:0f:
19:10:3e:8c:ca:9b:5c:e9:af:66:fb:e6:5b:93:d0:
77:cc:30:4b:52:4e:81:68:29:97:66:15:fa:23:52:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:55:BC:E7:DB:81:E4:60:61:BD:90:28:28:C0:71:C9:92:23:27
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:e4:17:51:c5:7a:3f:27:ac:97:e2:72:62:7a:b8:da:04:
20:46:6a:c8:85:8e:d7:2e:b3:6d:da:f9:65:1a:81:b1:45:f1:
6f:16:17:3b:40:99:b7:f3:4e:8e:8a:bd:67:3f:0b:d5:25:64:
d2:cd:29:92:c9:a1:92:2b:d7:35:17:b3:20:b5:bb:86:6b:63:
0a:98:c4:86:03:52:48:b8:56:04:79:e7:71:4b:66:ee:b8:45:
b4:e1:12:c5:98:e1:08:8e:c8:3f:2d:9b:8b:3b:b6:10:d3:1c:
6e:c3:eb:d9:c5:7f:cd:88:12:d1:32:a4:da:7a:28:5e:98:d5:
3e:cc:b3:3c:1f:5c:fa:fc:2d:fc:a6:c5:dd:9e:aa:4a:07:a6:
5b:47:10:43:16:87:66:6d:b3:d5:42:fa:ae:75:91:19:b6:99:
99:ed:05:97:a1:3a:5e:ec:d6:65:45:23:60:38:25:f5:79:ed:
eb:1b:62:fc:85:e2:cc:a4:14:63:a2:93:aa:59:df:b3:7d:8f:
a5:2e:61:26:f1:63:18:9f:58:69:09:e1:ee:94:b4:70:aa:d8:
37:c5:63:da:5b:63:a4:ed:12:cf:1f:13:ca:ab:47:f6:65:fc:
94:2e:5f:a7:3a:43:ba:c7:50:13:1c:f2:ae:d1:7e:e3:aa:47:
72:d5:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:19 2025 by rpki-client