Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: w9NYlUSzWCVlV2zuHg5+wvEv14dsWo1sexwMnOf9XGo=
Subject key identifier: 41:A5:FA:09:CA:6C:DF:02:F2:53:07:1E:B0:18:00:E5:71:44:3D:23
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 0199239F045DD739DB885C08B5AFD33F12D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: eQ1bGGTnzs4vA2p8GMb8F0G4QA2pVDgIZDseABjX+PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:04:5d:d7:39:db:88:5c:08:b5:af:d3:3f:12:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=41a5fa09ca6cdf02f253071eb01800e571443d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:cc:df:02:21:82:93:79:60:e5:cf:3a:63:
9f:1c:13:50:f7:cc:50:6a:57:11:81:b7:d3:1d:af:
53:f3:73:b2:8f:8a:a5:90:47:b3:b3:87:b4:78:fa:
87:72:1a:35:05:10:81:9d:82:7e:ba:96:c1:4a:c6:
83:36:2f:4e:49:d1:ef:e5:48:c6:35:77:85:f9:d6:
b0:ce:3c:e3:b7:b5:8c:be:65:28:6c:14:d7:21:f6:
a3:38:f8:fe:01:d0:2f:b2:c7:35:7d:28:f5:21:67:
10:3f:77:c4:ef:83:9e:59:f6:12:5f:74:3a:2d:cc:
d3:ac:3a:1c:37:66:42:6e:31:52:4a:da:73:db:09:
16:12:43:f5:41:76:71:44:d0:e7:13:ea:ac:56:aa:
4d:4e:01:41:55:38:55:48:f7:ac:64:1f:e8:2a:62:
8e:a0:c6:0d:4e:4a:7e:7e:66:f6:9a:c3:04:85:c5:
67:81:d1:2c:65:43:b3:20:fc:46:19:01:af:39:90:
03:ee:26:6b:a4:21:19:63:52:94:ad:25:13:df:47:
79:aa:06:6d:98:97:7c:fa:b3:41:e5:69:f7:5f:bb:
66:97:c9:e8:c9:48:48:62:16:4c:c5:a3:6e:2b:a4:
a2:90:de:18:1a:56:ef:1b:8c:23:5c:e3:03:03:30:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A5:FA:09:CA:6C:DF:02:F2:53:07:1E:B0:18:00:E5:71:44:3D:23
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:4e:fe:53:14:5f:d2:7c:3f:80:52:0e:71:13:07:b8:b8:
b8:bf:21:a1:6b:ba:c3:7a:3b:03:9d:80:7e:2e:9c:84:fe:8a:
a1:12:ad:49:58:24:f3:86:04:92:71:3b:41:6b:02:d6:0a:2c:
aa:49:b5:72:d4:1a:be:86:c5:fd:fa:81:79:56:8c:4e:9a:89:
88:fc:8c:14:f2:e1:b8:5b:1d:2f:e1:7e:4c:ca:3b:05:8f:c8:
6a:e9:8a:13:dd:12:30:fd:ec:81:7e:1d:c9:12:18:7a:a8:07:
db:74:5e:5b:3b:50:2e:6b:08:92:1a:11:03:1d:ca:09:12:24:
53:5d:64:8f:0a:d7:b7:28:b6:a6:08:93:5c:f1:a5:54:6d:e7:
ec:79:32:c2:ef:ef:00:32:0c:65:f9:7c:7b:1f:81:9f:a1:3d:
2b:f2:44:3a:7c:6e:fc:0c:de:38:a7:30:19:d3:eb:c6:b8:45:
42:44:5e:d9:be:98:d8:3e:42:4f:4b:ae:ee:7f:c6:bd:54:e0:
34:68:f8:7a:e9:bf:64:f5:67:d6:22:90:6a:78:18:95:9d:1c:
30:30:1b:c5:11:ac:29:ef:7b:2f:d2:65:37:56:46:69:60:22:
9f:83:5d:d8:bd:ac:d8:20:16:38:ef:25:4f:d3:6c:95:6c:11:
b7:82:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:44 2025 by rpki-client