Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: MQOc49o27rnowPspliPD2ZE4iZ94XkJBFMOccE+xUxs=
Subject key identifier: 20:2A:24:67:18:51:D6:FA:49:59:0D:22:85:5D:C6:A3:26:23:BE:3A
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 0199522F59A201F3B50F1C59933EE14F4A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 1196
Signing time: Tue 16 Sep 2025 11:00:58 +0000
Manifest this update: Tue 16 Sep 2025 11:00:58 +0000
Manifest next update: Wed 17 Sep 2025 11:00:58 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: 1eRRPd98DoT8uSSp4tN1Rby8cbnLXJVva0CdLHOUIck=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:2f:59:a2:01:f3:b5:0f:1c:59:93:3e:e1:4f:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Sep 16 11:00:58 2025 GMT
Not After : Sep 17 11:00:58 2025 GMT
Subject: CN=202a24671851d6fa49590d22855dc6a32623be3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:55:d3:fb:f2:e7:5f:17:ef:1d:f1:16:b7:
2e:30:16:39:7e:41:5a:3e:29:fb:31:8d:27:7a:c9:
b6:d1:86:40:cd:ff:be:16:c1:4b:29:f1:87:14:6c:
b7:f7:52:79:e7:6b:f6:2a:5d:e6:c3:fc:56:b3:1b:
ce:c0:a9:b4:fa:0d:ca:f9:62:71:39:cf:bf:5c:e3:
22:e9:c0:10:ed:c8:39:c4:ac:95:60:d3:61:b0:22:
1f:e9:d1:45:64:8c:4e:43:3f:97:df:77:92:52:8b:
09:61:22:be:0e:a1:43:32:e7:26:d6:23:20:91:35:
55:4a:54:42:e9:b1:dc:cb:b5:c0:ca:0b:d8:6b:07:
93:3c:84:74:21:cd:e5:05:e1:ef:b0:c6:f4:99:76:
73:af:26:67:88:a6:9f:c7:46:d7:ef:d6:23:45:ee:
00:6a:61:19:fe:70:23:b8:ec:0c:7c:d2:85:65:7c:
e9:68:95:75:58:fa:71:a1:c2:93:e2:39:83:1a:f4:
63:cb:d4:0e:35:26:2e:28:82:0a:e7:67:70:d3:3e:
94:ac:a0:1a:af:b2:fe:f6:31:d3:2d:04:a6:45:19:
52:77:75:bb:75:c0:dd:37:44:7a:0c:34:2f:0e:8d:
5a:78:ca:60:bc:c7:4c:f8:87:e5:0c:5a:84:e3:cc:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:24:67:18:51:D6:FA:49:59:0D:22:85:5D:C6:A3:26:23:BE:3A
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:37:13:ae:41:27:4a:9b:d5:78:3f:4a:61:57:7f:1a:a0:
6b:ec:c9:02:50:24:10:f9:d8:54:d7:2f:9e:84:e0:33:f2:f4:
fa:7a:b8:52:f9:ec:4e:58:59:7d:ef:41:2e:09:3d:22:d1:1a:
31:8f:f2:aa:59:4c:41:82:92:eb:1f:03:06:e3:8f:e9:e0:5f:
73:81:d1:c7:bf:c6:94:57:71:2b:6d:49:ec:a8:d6:34:87:45:
97:fd:ef:7d:f4:14:13:b9:54:7f:96:5e:18:93:5b:28:79:63:
fe:35:c7:9d:20:2a:43:bb:84:87:f6:aa:a2:68:92:09:9e:9d:
5e:af:53:d7:44:57:1b:ee:39:17:ab:f1:f5:97:41:82:84:df:
2d:a6:03:bf:36:f5:b9:d2:63:54:db:d1:7a:58:55:c4:ac:55:
ee:54:1c:59:78:8d:03:ba:f5:f6:dd:6a:00:e4:42:c0:a0:66:
10:b6:2a:2b:b0:cd:88:0c:68:d3:6b:5c:b1:ca:d4:ed:d1:73:
fe:76:e9:0b:ad:94:c2:0f:19:0f:70:9a:ad:2d:95:96:26:0d:
36:5c:3a:d9:65:83:4e:c3:22:1a:ce:70:86:af:aa:4f:a9:43:
3a:89:32:81:32:76:20:50:d6:9c:e5:31:7d:90:5b:d0:3f:cb:
23:69:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:56:53 2025 by rpki-client