Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: S2js07BMPng1AW0hie5VNI8BzWOOUW4GqSIajo8mNMY=
Subject key identifier: F6:C0:E5:F5:6C:21:6B:DD:D2:3A:E4:D9:DC:4C:D2:9A:BE:00:F4:04
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 0199375C4BF0CC97BBA9B33298E5786913A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0BC2
Signing time: Thu 11 Sep 2025 06:00:19 +0000
Manifest this update: Thu 11 Sep 2025 06:00:19 +0000
Manifest next update: Fri 12 Sep 2025 06:00:19 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: 4mvQ7vGzg0BTtK87XqhfMcCwIIDhkUiVN+8x20CfEcs=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:4b:f0:cc:97:bb:a9:b3:32:98:e5:78:69:13:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Sep 11 06:00:19 2025 GMT
Not After : Sep 12 06:00:19 2025 GMT
Subject: CN=f6c0e5f56c216bddd23ae4d9dc4cd29abe00f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:02:82:39:7d:28:af:85:4a:4a:d7:39:f9:
51:a5:a6:c9:cf:b3:5d:5d:06:41:82:dd:b2:aa:2e:
f9:d2:4b:ae:3e:97:7c:9e:ba:fd:3a:a2:35:96:c9:
ac:b4:70:c5:a3:56:61:3e:87:d5:07:1d:bb:af:a5:
34:b5:2e:cc:55:ec:78:d9:88:13:4a:75:d2:8d:7e:
d1:a0:4b:ac:ee:67:e4:c9:0d:df:ab:0a:bc:a6:fe:
a8:99:47:e0:5c:1d:62:4c:e2:da:43:4c:d0:4c:72:
4e:3c:9c:8c:b5:73:5c:71:09:8a:0d:71:1c:6f:2b:
fe:6a:4d:73:1c:05:07:dd:6c:0b:fa:bc:cf:2b:3c:
79:b3:d6:3e:07:8e:a3:37:94:4f:cf:47:68:0e:5f:
81:e6:a1:09:13:2f:f6:ee:e9:d8:97:a4:24:35:16:
09:77:19:c6:a8:80:4d:23:6d:c5:31:de:c8:06:65:
1d:50:c9:6f:97:4b:cf:79:10:fe:0b:9d:50:43:a4:
90:7f:97:17:bf:12:91:c7:c9:98:06:07:ac:1d:ed:
83:e8:be:d8:22:85:7f:6a:f9:ce:d9:b4:b9:1c:ac:
bf:61:93:6a:76:e7:ad:20:96:ab:b2:45:e2:34:eb:
24:a3:67:52:ae:14:e1:70:c3:ee:88:d4:75:99:ee:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:E5:F5:6C:21:6B:DD:D2:3A:E4:D9:DC:4C:D2:9A:BE:00:F4:04
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:35:11:00:d2:65:1a:fa:3f:02:a5:dc:bb:94:19:60:65:bf:
2d:77:a7:42:9c:ec:07:cf:92:6e:da:ea:32:90:4e:46:3b:25:
fb:27:81:9b:0a:6f:d6:c7:58:72:f8:83:75:a3:b8:ed:d7:46:
c2:18:29:1d:7b:40:62:37:99:6a:a4:8e:77:c2:db:01:f1:ac:
34:b2:e5:53:4b:c1:55:71:2f:9f:11:da:63:b0:ec:9b:2f:f3:
e7:91:44:26:76:5f:cc:ba:ff:09:b6:fd:ce:07:6d:34:85:cb:
83:16:6f:09:66:84:a5:5f:97:d8:66:0c:b6:76:0e:6a:71:87:
ec:73:0e:5b:bc:6b:65:3f:bc:d8:7d:f0:3e:58:5b:ff:34:3a:
ef:92:55:c7:d4:7f:57:81:7a:b9:72:85:09:f3:61:5e:09:11:
93:67:35:d9:2a:0a:7e:4e:7c:23:db:57:8e:4c:9d:05:fc:94:
bc:8c:31:67:d0:25:f9:20:3c:ef:a1:19:aa:f2:63:02:4b:96:
b0:8a:2f:02:ce:d9:01:a2:d9:df:68:fd:61:96:2e:ae:1a:29:
80:2c:fe:f0:b3:c9:dd:34:11:a7:0c:8d:31:e7:f8:d4:31:24:
b0:a5:c4:0b:d1:4f:3e:e5:f0:f6:53:90:fd:ed:ad:fe:e2:b4:
e2:37:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:33:36 2025 by rpki-client