Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: YjRSFihF2eOPXl1t+ddT4lEDTqds+/rZ9OML3E5/Pj4=
Subject key identifier: 38:24:C7:44:7A:89:22:07:87:72:27:8F:12:6C:3A:19:25:57:69:D6
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019926D6F6E4956950298C568C009C615216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 168B
Signing time: Mon 08 Sep 2025 01:00:46 +0000
Manifest this update: Mon 08 Sep 2025 01:00:46 +0000
Manifest next update: Tue 09 Sep 2025 01:00:46 +0000
Files and hashes: 1: K3iEvVMv5L7A8rAEeU5HVBi7LhE.roa (hash: EkwL2Kur19TmNA6m2yAps4NwnDYDcypMzzrfUdVMCj8=)
2: _sju8wm48N68sRMK2WrJFDzm8eM.roa (hash: wi4jIUl5fpczu4ZQGXUrAmPmxuLJ1XGfhTmddVK48kE=)
3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: IoFGA6p93eK4YSTRd3Hb5zQE1ZQHVGRlzpIThweaFGo=)
4: ys6iILu3_I7CA1cINOiWNhnSJmM.roa (hash: qRVpWIwOKss/jcrKi+UW7mCwGaJx3pwZSGEHXYR+fPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:f6:e4:95:69:50:29:8c:56:8c:00:9c:61:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Sep 8 01:00:46 2025 GMT
Not After : Sep 9 01:00:46 2025 GMT
Subject: CN=3824c7447a8922078772278f126c3a19255769d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:d0:d9:45:fe:7f:7e:3f:59:dc:7d:e6:45:
85:84:6f:fb:cd:b9:c3:05:fa:f7:ce:43:f2:79:5f:
de:35:a8:97:8c:e5:37:13:94:67:83:d7:26:a1:41:
1e:e4:b4:50:a3:9e:6a:22:cb:15:5a:72:d4:75:ba:
f9:6f:b4:79:65:10:70:f0:df:67:e9:ac:52:41:bc:
1b:77:fe:79:28:e1:11:96:81:c0:4f:16:15:33:30:
bc:43:20:69:e1:28:35:50:0f:be:d0:41:e7:0b:9e:
cd:03:b1:d6:83:b2:4f:10:91:c7:30:f0:31:cd:bf:
20:05:96:be:e5:ce:da:35:a0:ec:8b:c1:e5:63:d5:
0b:05:8b:bd:61:47:54:c0:61:65:e4:0d:09:89:dd:
81:ec:d7:f2:ba:fc:a2:ee:f8:ef:7f:4f:da:c6:de:
2f:ea:15:13:3d:e3:7c:97:e6:50:97:23:e4:9e:c0:
55:91:36:cb:16:97:7c:c0:b2:ed:80:6b:8f:48:70:
3e:8f:f8:a4:b9:9b:ab:ce:fd:14:cb:c2:ea:c3:83:
81:07:1d:f8:62:c6:7a:35:6f:3b:60:67:92:45:af:
54:4b:01:22:48:fb:e2:dc:8c:79:2c:a8:7f:3e:21:
1b:bb:e0:78:bc:1c:5a:79:97:bf:c2:2a:2c:86:35:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:C7:44:7A:89:22:07:87:72:27:8F:12:6C:3A:19:25:57:69:D6
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:05:46:22:39:e9:25:ac:85:49:b2:3f:b2:01:04:95:ea:14:
79:92:13:04:e2:37:46:a7:be:ff:d9:62:54:fa:ed:92:e5:d3:
22:8c:da:45:2b:ff:db:a7:fd:05:9b:76:a3:da:db:51:21:c3:
c0:be:d7:b6:e0:ac:cd:b6:5b:42:65:95:e9:2e:b5:3e:b6:fc:
c4:47:0f:07:e1:cf:d3:0c:57:ea:92:47:07:04:8f:f7:f3:44:
15:03:1c:27:8a:ed:94:22:0e:e2:49:e6:a5:b6:a1:bf:8a:dd:
a9:4e:5e:5b:aa:86:8c:da:cd:a0:2e:96:0e:75:51:6c:16:ea:
02:8a:3c:8e:1e:2c:2b:86:4d:18:c6:d6:a3:a2:12:16:de:a2:
77:b9:df:95:b8:55:88:b5:26:7b:0d:c7:7f:65:34:d6:d2:cb:
93:17:78:87:92:35:f3:f1:ac:d8:8e:8d:ef:cc:07:be:69:2f:
43:af:d1:2b:5c:48:83:02:08:52:13:41:f0:f0:3e:b9:43:63:
62:ac:38:75:15:f7:35:b1:53:58:21:78:a9:d1:ed:4b:02:08:
d1:e2:e2:61:52:0b:4d:ae:5d:71:f0:4c:69:a4:d8:0b:28:3d:
97:6e:8f:10:1e:a7:cc:2d:21:29:1b:a5:35:7f:9b:5b:99:fe:
d1:6a:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:29:24 2025 by rpki-client