Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier: dUKZZhUrtrfyKyd07gq8sHn19fTrDMSgHEq/mVhXDfo=
Subject key identifier: B9:BB:AD:DE:AE:59:B4:46:43:76:63:B6:CB:B4:8D:FF:9A:E7:90:0F
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019933EE87BB127AE88BE789F43F06D96A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number: 1682
Signing time: Wed 10 Sep 2025 14:01:34 +0000
Manifest this update: Wed 10 Sep 2025 14:01:34 +0000
Manifest next update: Thu 11 Sep 2025 14:01:34 +0000
Files and hashes: 1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: 2zfAxaKXIiws0xOq2BWtrJxqbMzjHN4kv/BPZ9iHcu0=)
6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
7: W0I5WxQMrOu6TANHFOGcvsplCew.roa (hash: as8TMPog4cNQstxcdryoIwh9zVe/CWxue8zaTtgppZI=)
8: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
9: qwwHopD_0G8M1Je41mhruAKGMpE.roa (hash: aHrYRaDs2jeGMQeUQIc+2frl2SVKEgdlFJTzXtA4yQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:87:bb:12:7a:e8:8b:e7:89:f4:3f:06:d9:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Sep 10 14:01:34 2025 GMT
Not After : Sep 11 14:01:34 2025 GMT
Subject: CN=b9bbaddeae59b446437663b6cbb48dff9ae7900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:dd:15:dc:5a:75:46:8a:68:e2:3b:b4:3e:
c2:0b:a7:67:14:f9:d1:14:54:73:14:9c:4e:17:3e:
ea:e2:63:bc:0e:b0:df:a2:50:0a:94:05:b0:f8:10:
9f:bc:a3:7c:a5:2d:38:33:ab:ab:be:40:6e:1f:05:
b3:3c:6f:5c:e4:27:8a:c0:33:4c:bc:53:21:82:e6:
26:44:19:31:35:ef:df:e9:c3:23:dd:ad:6d:5b:6a:
5f:57:39:61:96:62:be:b3:90:6f:74:85:99:3f:7c:
a0:5a:8a:b6:17:d0:fe:10:4c:14:97:31:be:05:f8:
d4:ac:84:c2:99:ad:06:97:9e:1e:ec:bb:e2:3e:eb:
61:c2:73:fd:71:59:95:4b:c7:de:93:f6:15:55:27:
46:97:0f:81:7e:ed:ec:bc:a8:ec:bd:64:97:ea:8d:
0f:c7:58:0a:e1:06:39:32:99:c5:2f:29:0b:22:04:
c6:e1:d6:64:37:40:43:09:49:dc:9f:4b:a2:c0:5a:
6c:9a:b3:75:7b:30:91:f0:cc:82:63:a3:03:d1:62:
05:11:db:8c:a9:c1:17:11:29:72:c9:f2:6f:c0:a8:
55:ac:3c:d2:70:d2:45:1c:4b:bf:f9:b1:2d:2a:e9:
67:36:ad:a1:44:fd:d5:fe:1e:ea:50:b5:4a:02:6c:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:AD:DE:AE:59:B4:46:43:76:63:B6:CB:B4:8D:FF:9A:E7:90:0F
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:40:09:d1:fb:38:70:ea:c0:f4:a3:80:a3:3c:3a:ea:fc:
c1:f0:b6:54:4a:8d:4f:b1:a5:a4:11:c0:85:a4:09:b4:9b:fc:
bc:47:34:6b:07:ee:d8:ae:3c:0b:5d:cf:df:b7:d2:6d:15:a4:
c8:25:34:b8:b1:e1:ff:1e:9b:9a:c1:b0:fb:55:06:03:ab:fc:
ee:d7:aa:66:a1:dd:0c:b4:a0:95:30:ff:13:8b:1e:02:47:cb:
68:c0:00:01:7d:ee:9d:44:70:60:9e:cf:fa:ce:37:8e:10:32:
fb:22:bd:87:e8:c5:92:dd:42:ec:93:94:e0:13:ee:2e:2b:e0:
fb:f0:8c:c0:8c:5b:b3:21:76:f8:1f:89:0e:b9:95:9a:b1:7b:
a9:e2:e3:32:81:a3:c1:5b:7f:54:e1:7b:8b:ef:06:bf:1c:1c:
9f:71:f3:34:bc:c6:ed:8e:21:65:3f:e7:15:bd:c0:b4:c9:90:
29:b5:1c:52:fc:ed:06:92:c5:09:e3:9d:26:65:fa:be:10:94:
ff:ca:45:84:10:b8:48:aa:6f:d4:61:56:81:7b:9b:49:ea:13:
eb:d6:9f:6a:7a:1c:56:39:c8:78:08:55:05:87:b0:ce:41:42:
73:b3:4e:35:5f:41:0b:d4:0b:24:9e:c4:7e:98:47:1d:d9:ce:
1e:30:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:30:13 2025 by rpki-client