Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: Vb+gCSOGB2Rkd0GCIeALfrm6DASU7Gu/zryg0eEbMAQ=
Subject key identifier: 5C:CF:C8:81:82:E1:8A:60:8C:8A:16:D1:8E:16:68:78:95:FD:37:AD
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019952D450F51F8A2B61A93FC070498870C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 0F4C
Signing time: Tue 16 Sep 2025 14:01:09 +0000
Manifest this update: Tue 16 Sep 2025 14:01:09 +0000
Manifest next update: Wed 17 Sep 2025 14:01:09 +0000
Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: Ou4SXTenRTquzLvtoMlD2fK0pXEIyBsxiTnge38N/9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d4:50:f5:1f:8a:2b:61:a9:3f:c0:70:49:88:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Sep 16 14:01:09 2025 GMT
Not After : Sep 17 14:01:09 2025 GMT
Subject: CN=5ccfc88182e18a608c8a16d18e16687895fd37ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:49:d7:66:0e:c6:10:d9:65:7c:73:ce:14:
cb:77:7e:8b:ce:94:87:3a:57:c6:d7:03:8e:b9:7e:
7f:9c:7e:4e:7b:4c:09:3b:3b:c1:54:0f:68:f4:5b:
5b:91:98:dc:dd:f0:09:9e:11:15:15:2d:a7:4a:e0:
6b:cf:7d:7f:f6:1c:43:be:23:0f:5f:44:27:95:22:
65:d6:c9:34:29:65:63:04:21:0d:41:b0:b2:8e:a4:
9f:73:37:b8:65:a7:04:f9:78:f4:bf:08:d6:88:9b:
31:33:51:56:c1:59:65:f5:8d:5e:85:e4:ed:d4:d8:
b1:a4:87:d8:47:ff:c8:8d:21:1f:63:eb:c7:9a:f0:
e3:6f:1c:66:63:4e:d6:61:6d:bb:23:55:95:d3:cb:
8e:07:a4:b1:07:cd:9d:5b:30:1e:3e:79:dd:9b:02:
28:c5:cb:bc:ac:b4:37:e3:ad:96:88:5f:16:55:0e:
01:88:ed:49:03:63:74:a2:83:b9:70:b0:73:0f:c9:
fb:fd:04:f0:43:d9:85:7c:b6:04:71:2f:45:a0:89:
13:a6:48:ad:ed:a0:0a:16:d1:1c:1e:ed:dc:a3:12:
45:1b:bd:dd:93:92:4f:85:2c:c1:1f:9c:49:a8:23:
ce:13:db:94:34:49:38:42:99:c5:bc:d4:a0:e8:4a:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CF:C8:81:82:E1:8A:60:8C:8A:16:D1:8E:16:68:78:95:FD:37:AD
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:58:a1:73:f0:79:49:f8:a2:63:52:31:73:bc:c6:a4:7e:9f:
27:17:57:cb:8a:b7:9c:84:37:5c:d7:67:07:92:e4:0f:ab:6e:
6c:a1:0d:d6:ea:39:74:be:a2:ee:ae:d7:b0:b4:91:d4:e7:39:
16:5d:b2:e8:66:be:10:18:ab:f5:81:7b:97:e1:7b:ad:4e:a3:
fb:b1:4a:ae:82:c8:97:8f:53:12:72:bd:67:fc:3e:fd:73:82:
a3:e7:48:8e:b2:8a:33:30:c8:7b:7a:d0:d9:f7:2a:49:c5:0a:
0b:c7:e6:96:72:00:a3:6d:92:00:1b:0f:75:48:06:23:61:a9:
40:b5:61:51:30:74:0c:9b:5a:2f:f8:30:71:08:b2:5e:4b:4e:
cf:df:b5:4d:ca:f9:1c:f5:ec:69:5c:cf:70:46:2c:aa:53:01:
32:ce:27:cd:cd:4c:b7:a8:24:24:06:37:76:61:3d:02:84:6f:
ab:87:d6:10:9c:70:38:e3:e3:d4:bf:22:6d:18:c6:90:27:15:
81:d7:3f:ba:cc:d7:55:b5:11:31:78:eb:bc:98:59:53:23:52:
18:fa:e4:af:39:00:b8:68:10:1c:f7:56:18:e8:21:c9:fc:0d:
b1:c6:8e:14:29:e5:3f:4b:72:d3:86:c4:51:71:1d:9a:ea:02:
b6:15:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:02:51 2025 by rpki-client