Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: k/MU3KBOi/RDcuOGb0rdvs7bS5bWG7zrTH5sdwc4mPc=
Subject key identifier: 0C:7E:1F:5C:6C:5E:2A:BF:78:D6:10:88:7E:96:C3:AA:C8:6E:BF:C9
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019921E787274FD25EA2DB9355CA407FF50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:45 +0000
Manifest this update: Sun 07 Sep 2025 02:00:45 +0000
Manifest next update: Mon 08 Sep 2025 02:00:45 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: z5u35iy9pUsdvSCb2p5tgFoEWhmaj9w0yO8Qsle/bow=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:87:27:4f:d2:5e:a2:db:93:55:ca:40:7f:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Sep 7 02:00:45 2025 GMT
Not After : Sep 8 02:00:45 2025 GMT
Subject: CN=0c7e1f5c6c5e2abf78d610887e96c3aac86ebfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:b3:2c:c2:cf:3d:76:90:f0:eb:2f:d1:dc:
12:ae:6c:3b:e7:81:4d:ac:fd:74:37:fa:bd:a0:63:
3c:7c:aa:22:bd:9b:01:f6:cb:40:b0:af:8a:fd:2b:
63:e9:3b:3c:e4:8e:7f:0d:e2:12:34:fd:1f:aa:d1:
37:bc:4f:d0:f9:21:e7:f0:ad:b3:82:16:9e:30:21:
dc:bd:7f:ed:81:9f:38:82:f7:d3:d1:1c:d0:80:1a:
91:7c:50:74:0a:02:d5:77:51:c1:12:aa:a0:a9:be:
89:f6:87:ba:a5:70:68:aa:f9:fa:e7:5f:6e:c7:75:
a1:22:98:e0:17:ca:d8:88:64:4b:ba:33:7b:9e:f9:
c1:98:51:c4:4b:01:43:5b:51:2e:83:76:8e:9f:cf:
16:b9:14:79:fc:0e:db:b2:c9:32:97:73:c0:39:7e:
5a:ec:97:0f:8d:de:cc:25:98:76:3c:4c:af:b9:0f:
19:36:8f:05:19:3c:42:c8:c1:45:27:b8:e5:93:56:
d9:61:e4:ef:62:76:dd:ac:2e:d0:75:3d:d4:7c:35:
00:b3:15:ce:38:b8:00:6b:5f:b7:76:d4:63:95:59:
41:42:32:f9:05:e0:f7:99:93:d6:a8:51:27:fa:ad:
02:1e:f4:60:29:c8:05:b5:8b:14:e7:f4:b1:05:42:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:1F:5C:6C:5E:2A:BF:78:D6:10:88:7E:96:C3:AA:C8:6E:BF:C9
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:02:1a:4c:0d:eb:dd:d4:b1:01:41:85:37:3b:99:2c:9e:ba:
01:32:d0:e5:40:7f:0e:3a:46:cd:26:4d:69:86:00:fc:a3:1a:
2a:ba:25:32:3f:62:a4:94:31:f4:5e:54:10:ae:57:12:f0:17:
fa:3a:ba:22:9e:82:16:e0:ab:d7:cb:1b:34:31:ca:d2:5a:d5:
b1:4d:65:0f:03:e4:6f:fd:66:35:97:0a:12:28:ab:6d:31:ee:
68:37:6b:e0:c1:7c:4e:25:f7:75:35:cd:28:16:03:0f:9c:91:
f3:50:1b:8e:7f:92:e7:38:2a:be:76:46:e4:42:2e:9b:46:bb:
21:59:7e:c9:9d:41:3c:d1:19:a0:4b:0d:54:77:02:d8:06:53:
a1:8a:c2:3e:d6:8f:13:34:73:e9:80:e2:4c:53:af:37:7d:e3:
c8:58:d0:de:fa:5b:db:0f:01:58:38:a5:51:64:bd:fe:0a:3a:
c9:af:da:61:1e:49:56:b0:8d:5a:60:c0:23:cf:c5:10:45:e5:
4f:be:79:98:72:26:93:87:79:2c:05:f4:c2:0c:5f:1f:1f:d4:
04:d5:8a:cb:92:cd:2f:57:72:7e:b2:66:0c:b3:36:01:39:a2:
69:64:01:da:81:66:76:88:1f:9f:84:00:a5:fd:30:fb:2e:4f:
f4:8a:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:40 2025 by rpki-client