Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: GqRS4WyX8LpSdJYC4R5pDn3LO8Oc3Or6ONWKIAGKm2k=
Subject key identifier: 91:66:5E:A2:61:24:EF:96:C4:FA:0A:E9:A9:77:71:F2:ED:B3:D3:87
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 01993492496358612FA8A1F11A440B4CDB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 15D3
Signing time: Wed 10 Sep 2025 17:00:26 +0000
Manifest this update: Wed 10 Sep 2025 17:00:26 +0000
Manifest next update: Thu 11 Sep 2025 17:00:26 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: mqT0Rn+txF0w4wUw/WXdhEhhxovkfDV2S2BzPNjoWi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:49:63:58:61:2f:a8:a1:f1:1a:44:0b:4c:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Sep 10 17:00:26 2025 GMT
Not After : Sep 11 17:00:26 2025 GMT
Subject: CN=91665ea26124ef96c4fa0ae9a97771f2edb3d387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:39:2f:07:f6:f4:e4:9d:84:5d:43:c3:42:
42:b3:bf:25:72:a9:82:c5:4a:d1:0f:d4:88:e8:c1:
a6:38:ce:7c:c0:b0:40:84:c8:64:38:da:64:ef:96:
20:ea:57:59:e5:cd:28:ea:5a:0c:0e:05:71:25:55:
10:46:5c:58:30:68:05:57:20:f6:a5:2d:c0:fd:09:
ff:f2:6c:93:d7:1c:f6:78:e1:14:13:06:6f:87:93:
85:52:a4:6c:de:d4:62:cf:1f:ac:18:73:67:d7:e1:
5f:9a:52:53:c4:d1:07:9e:bf:30:91:39:4a:b7:e4:
1a:b2:26:c5:ba:b4:1f:c7:b3:a8:36:7f:c8:24:71:
2c:9f:b9:77:fd:15:08:57:c1:95:69:47:ac:b1:be:
1e:6f:6a:b5:28:2f:cc:db:df:d9:27:ed:99:7f:1f:
f4:f6:07:20:84:0c:ab:b2:5b:14:81:2a:e1:85:f3:
d8:7f:06:ad:fa:56:ab:0a:e7:f6:98:09:82:1d:7e:
78:df:f2:11:4a:07:98:66:2f:a6:ef:56:3d:47:9e:
c8:db:e3:52:88:03:ef:b9:bc:f3:b0:2a:8a:67:42:
94:a7:13:83:a8:7e:5d:65:3c:1b:35:a9:b4:16:b1:
b5:b9:58:27:7f:a6:d2:c2:a3:e5:c2:48:50:ba:6c:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:5E:A2:61:24:EF:96:C4:FA:0A:E9:A9:77:71:F2:ED:B3:D3:87
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b4:de:2b:e3:f7:d8:2e:5d:a9:21:45:fc:59:8e:80:45:80:
0c:58:5f:16:95:03:2b:71:10:21:ce:c0:bf:91:51:e3:c4:ae:
b3:72:27:31:35:98:c6:e2:74:8b:9f:e8:73:d4:89:26:6e:28:
1c:4f:55:32:38:17:c8:9b:7e:e6:d7:b9:2a:8a:0b:8e:9a:84:
b9:06:9c:96:96:dd:30:59:ab:43:6f:53:56:64:d5:e4:c5:14:
15:a7:97:95:e3:99:cc:2f:8e:e5:8d:b1:f9:d3:67:10:2c:34:
5f:ec:3e:e0:e2:c5:e2:49:a3:7b:a7:b7:2f:d3:f2:39:e0:43:
9a:96:47:07:d8:0c:55:c5:39:c3:76:47:7a:7d:50:42:6e:eb:
45:00:f5:6e:30:de:bf:d5:81:9b:0d:de:98:52:46:13:0f:38:
49:2f:40:31:a2:39:84:52:a4:1d:ac:1b:65:9f:9c:ac:c5:c5:
37:b7:75:b1:21:4e:66:e4:2f:5d:6f:8c:e3:e1:eb:7a:62:49:
34:d4:40:7e:52:d1:a8:a1:44:a3:57:61:48:b4:d8:30:0f:01:
90:17:a2:85:a2:d6:39:6f:a3:41:63:33:ad:ae:09:ed:1f:ba:
10:4e:47:b8:55:58:20:0e:fc:b5:17:4a:4d:a7:e2:c3:42:20:
eb:c0:74:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:50 2025 by rpki-client