Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: wCtuEEfACG5YRwedMbKDm6LyZdcmm2RNIeylOs8e8Rk=
Subject key identifier: 63:85:DB:B5:B2:4D:A4:87:A7:C2:12:97:B3:93:C9:1E:ED:17:47:CA
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0199228C30FD0EAC11230EFC59C3AC283593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 0362
Signing time: Sun 07 Sep 2025 05:00:36 +0000
Manifest this update: Sun 07 Sep 2025 05:00:36 +0000
Manifest next update: Mon 08 Sep 2025 05:00:36 +0000
Files and hashes: 1: FXp8fQ6gh8oelASFQ2BfVeHiv6Y.roa (hash: JfDcJIX809/8XwYFjwqEGsiF/3/D+Oif9zz1ms1Fn7c=)
2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: 6z1X6ejtg90Wd2Swvl4HLS09mhnXIPa/1qLnV/ZB4LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:30:fd:0e:ac:11:23:0e:fc:59:c3:ac:28:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Sep 7 05:00:36 2025 GMT
Not After : Sep 8 05:00:36 2025 GMT
Subject: CN=6385dbb5b24da487a7c21297b393c91eed1747ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:71:93:3a:56:45:35:56:3f:98:5f:7a:4c:
12:93:cf:6c:6e:f7:61:e5:00:ce:e4:4d:71:eb:d0:
dc:28:ce:cb:67:f0:33:01:40:20:d2:2f:6a:a4:90:
d5:e0:b4:7a:d8:ad:56:5e:8d:19:f3:8b:66:50:6f:
c0:20:50:d5:80:b0:5b:50:20:b2:5e:f9:8a:23:9b:
ab:c9:00:0b:cd:1f:91:c5:c7:da:6b:3d:3c:c7:4e:
e3:ae:56:66:35:32:08:cf:74:de:b3:53:a1:20:e8:
ee:e7:41:6a:8f:f9:cf:dd:ad:65:35:b1:3c:97:f9:
3b:ea:ef:e9:d7:4d:52:15:90:0f:f8:61:b7:a8:ed:
4d:6d:71:c2:40:13:d0:f0:4f:4f:35:e9:b9:05:53:
e9:76:a5:ab:37:05:4b:f6:08:69:ee:b1:83:72:c1:
ae:34:e0:b2:51:23:f8:fc:27:be:d4:2d:6c:92:e6:
25:3a:57:16:11:de:a6:7e:40:14:77:e3:19:1c:9a:
62:77:04:5d:c6:b1:c4:1b:ee:ef:f3:57:51:43:8b:
aa:9d:91:05:4b:b2:36:dd:7d:29:92:09:d0:c3:74:
3f:82:11:51:d9:ac:1c:d5:b8:d9:34:e4:67:f2:47:
f3:c2:2e:76:82:9c:13:e4:69:e2:fc:47:3d:5f:c5:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:DB:B5:B2:4D:A4:87:A7:C2:12:97:B3:93:C9:1E:ED:17:47:CA
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2d:39:80:d1:a7:ae:1a:d8:a0:56:d4:02:0a:d5:ce:cd:7d:
27:8e:c1:42:97:93:43:14:7b:66:6a:3f:13:10:95:f3:f5:99:
73:bf:b3:a3:27:d4:97:d0:c5:29:d2:a4:54:2b:b5:c7:f3:bf:
4c:c6:6e:9c:6d:e9:8e:37:2b:41:04:76:66:41:44:38:8a:29:
1d:f2:b0:92:13:6e:e6:82:19:13:32:a6:d9:45:e2:3e:57:df:
75:ee:4c:67:1d:ca:02:cb:76:06:41:9c:a5:5e:21:e9:b2:ff:
e1:1f:09:53:bf:2b:ec:73:41:19:b5:6a:69:af:3a:bb:a4:dd:
72:68:e0:e0:7d:bf:04:05:e5:44:18:27:df:f2:30:74:6a:88:
69:b9:87:e3:f4:7b:58:92:99:0a:3d:2a:98:b0:d0:4f:53:c8:
0e:4f:64:57:ef:73:c9:2c:21:66:41:46:c2:1c:08:05:2e:6f:
30:ff:b4:28:49:c6:89:41:12:40:85:81:4b:07:a4:99:02:d5:
32:3f:5f:49:9f:92:2b:7b:32:69:b7:cd:3f:40:19:20:0c:f7:
9d:ea:1d:71:f9:bd:59:be:82:a2:2d:08:02:26:0b:72:43:1d:
4f:4e:30:29:1e:76:fd:df:fb:05:4f:56:eb:69:0e:4c:14:70:
da:e5:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:39 2025 by rpki-client