Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: bNSjFjqYVeZZ/n8zsAvUtU9WwtRTHdgCJKnbrpIbPJU=
Subject key identifier: A1:F9:61:11:D3:FF:F9:8A:B2:5F:8F:88:8B:53:9D:77:A2:6F:15:73
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0199361347C4C9F6051F651A449C4469ED07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0154
Signing time: Thu 11 Sep 2025 00:00:57 +0000
Manifest this update: Thu 11 Sep 2025 00:00:57 +0000
Manifest next update: Fri 12 Sep 2025 00:00:57 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: TMtLAkCcW4/JgBtwciUP2HFRKDso17YHc0X7XG/vXf0=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:47:c4:c9:f6:05:1f:65:1a:44:9c:44:69:ed:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Sep 11 00:00:57 2025 GMT
Not After : Sep 12 00:00:57 2025 GMT
Subject: CN=a1f96111d3fff98ab25f8f888b539d77a26f1573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:ef:a2:6d:27:59:13:d7:76:5a:06:95:2f:
c0:bc:ab:ba:35:9d:19:32:cd:95:7c:44:b4:87:de:
3e:9b:77:6b:69:b1:8f:25:18:01:32:eb:64:de:4b:
75:f8:2d:9b:11:41:40:04:eb:24:d9:43:69:25:fc:
f0:e9:a6:90:58:00:4d:b8:c6:18:fc:42:94:28:6f:
5c:d5:53:b7:fb:a3:20:d0:64:38:0b:a4:10:11:7a:
8a:ae:0a:ba:66:88:d8:4f:9b:1f:e7:6c:84:08:d4:
89:9a:d2:7f:56:0f:77:31:95:48:e5:51:d4:06:07:
7b:1b:33:85:fe:6f:34:79:4e:27:9f:73:c2:3e:6b:
e5:7d:b3:56:06:e2:51:63:e7:b9:51:70:97:af:0b:
62:98:da:88:f5:7f:ab:4c:9f:51:01:42:38:96:b6:
f3:de:2a:11:ad:7f:4f:a1:05:49:16:e8:88:46:06:
24:ac:7f:91:10:db:d9:8c:b7:94:3e:0f:ed:61:28:
7d:72:2c:f8:c4:15:12:8a:40:9e:f8:ce:90:f6:cf:
68:fb:5c:99:d3:b9:e8:ca:fa:b9:46:47:dd:b7:e6:
ac:b4:90:c2:bb:cf:48:e8:6c:fe:52:7f:d4:76:73:
96:d4:ef:eb:43:a3:78:0d:74:d8:d7:97:47:18:65:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:61:11:D3:FF:F9:8A:B2:5F:8F:88:8B:53:9D:77:A2:6F:15:73
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a5:52:71:e3:ff:4a:45:ad:eb:38:5f:da:4d:fb:b2:e4:29:
bd:90:1b:5f:33:0c:2b:c4:5f:fa:b2:39:11:b3:32:e2:49:d8:
87:19:e2:cc:da:38:b2:73:87:28:df:b1:27:37:95:b0:79:84:
16:55:78:4d:e3:8c:4d:43:da:45:38:81:cf:36:66:7e:28:26:
de:e0:cb:fc:ea:78:80:06:cf:f9:78:e0:50:eb:32:ee:27:98:
b3:36:38:10:a1:6e:ec:a0:cc:bb:37:b0:7d:0d:63:26:0c:04:
f3:33:6b:e4:b3:bd:ce:0c:a2:29:78:36:04:0c:33:ee:f2:b9:
70:9f:28:bd:aa:60:1c:8e:7b:e0:c9:97:08:f1:94:ef:81:cd:
07:4a:38:62:49:19:7f:3a:79:97:f7:38:5d:01:5f:54:f7:67:
38:14:48:13:af:a3:63:fa:f7:00:ff:ea:3c:1f:2c:7c:d1:13:
13:c4:31:59:87:c0:b1:d3:17:98:f7:42:19:80:1b:1d:c8:f4:
06:cd:76:44:75:c7:d0:42:02:43:7e:63:3a:68:18:ca:0a:fa:
10:1b:29:cd:69:b7:b8:93:8c:aa:7e:94:72:e2:22:75:ad:28:
d6:16:82:7e:23:de:8b:8c:7a:3a:86:0e:39:38:76:83:65:ad:
27:2b:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:20:26 2025 by rpki-client