
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: wdznp3DQoG/uBX6jxpuyZhhZVzJjPYx4Hd6IE6wMIjI=
Subject key identifier: 5B:F1:C4:53:F6:C0:DA:3D:4A:64:0F:94:D1:0B:F9:F3:9E:17:53:E6
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019938023688E9BDC75BF2632F8A39B816B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 01EC
Signing time: Thu 11 Sep 2025 09:01:33 +0000
Manifest this update: Thu 11 Sep 2025 09:01:33 +0000
Manifest next update: Fri 12 Sep 2025 09:01:33 +0000
Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: W4AAfG12YRhEfsZABxi1tL3qQvbJrtumhevdL7biso8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:36:88:e9:bd:c7:5b:f2:63:2f:8a:39:b8:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Sep 11 09:01:33 2025 GMT
Not After : Sep 12 09:01:33 2025 GMT
Subject: CN=5bf1c453f6c0da3d4a640f94d10bf9f39e1753e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:ac:f0:d6:f5:d0:8f:13:b1:35:34:0a:76:
88:76:7e:af:ca:9b:82:48:e6:8f:d7:cf:dc:fd:ae:
7b:bb:02:be:e8:62:8b:7f:8b:c0:e3:ef:52:e8:9f:
d8:90:ab:a0:1e:2b:a7:ef:7b:21:d1:49:69:39:b5:
89:85:1b:60:95:63:ac:65:1c:f7:96:97:c0:c6:85:
d2:2e:c2:a4:74:ab:9a:3f:6e:9e:7a:ad:5a:f6:c7:
1d:f2:95:20:b5:46:f5:ce:25:f9:77:0a:b6:88:25:
55:13:45:94:f2:11:d2:70:b6:43:c3:78:27:13:87:
fc:2d:ec:a9:ef:3c:46:fd:92:54:59:21:57:51:06:
f4:f4:54:a7:af:bd:e5:bd:c0:fb:15:ea:f3:92:b7:
ff:be:af:7e:63:c6:a7:8c:96:46:82:e0:e7:c8:ae:
91:d8:bf:f5:7c:03:f0:41:3c:0e:d9:0d:69:0c:45:
8c:53:ab:85:a9:bf:39:df:38:6b:c8:26:0f:33:3c:
05:d7:87:a9:dc:03:b2:92:15:61:63:f5:dc:af:28:
f0:bf:1a:f9:a1:6b:b5:10:45:66:c4:48:75:a1:34:
77:cd:cf:74:62:63:1b:a2:e0:c9:99:cb:55:a3:5b:
5f:cd:7f:e2:27:6a:c0:a1:f5:23:07:f1:d9:59:c8:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:C4:53:F6:C0:DA:3D:4A:64:0F:94:D1:0B:F9:F3:9E:17:53:E6
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:66:ab:2a:2e:92:48:18:f6:0a:42:b1:2f:f4:a2:a9:f3:
4f:17:19:94:bf:89:76:96:e0:ef:f2:11:cc:b9:e6:53:c4:82:
c8:4a:74:63:23:3d:12:9f:ee:46:61:51:a0:86:e9:70:9c:cf:
16:cd:dc:fe:71:ba:55:0d:32:3a:4d:a4:b2:16:c2:f9:4c:59:
6d:e6:cb:5a:1e:8d:b7:d0:fb:fe:3f:c1:c6:6c:84:cb:80:f1:
0d:ab:dc:5c:9d:99:b5:62:39:38:23:4f:39:c4:fa:f2:01:d0:
61:ac:ce:fc:0f:e0:0f:08:7f:d0:fc:f9:93:92:ae:93:01:5d:
58:3d:3e:e8:f7:fd:44:87:ef:cb:4a:d8:8c:33:16:e7:c1:14:
5e:f6:2c:8c:b5:0e:53:32:a1:ab:f5:8c:89:4d:c3:67:12:2b:
81:09:99:55:af:c8:bf:be:9b:12:ae:09:c2:7e:10:e7:d1:4b:
34:c9:68:dc:c5:94:82:f0:a9:0f:b1:2c:51:05:18:a9:05:b3:
29:95:2e:44:fd:e2:96:23:2d:df:b3:dc:f5:a7:9b:cf:30:02:
7b:99:b4:80:0f:a7:98:c9:8a:43:39:9a:c2:f3:78:41:89:ca:
dc:76:23:19:48:73:77:0e:7d:61:31:c2:3f:e9:8e:56:e4:c2:
da:d8:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:13:32 2025 by rpki-client