Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: 0ofNqIIBwnOMj73xNvja4AV0H/k7gp/cnuZr2Kr/t7M=
Subject key identifier: 6A:06:9D:0B:9C:FF:7B:74:3B:E7:2E:17:95:33:48:B1:E5:F6:E9:31
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019933490567AF875CC9B96ED315C406DA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 13B4
Signing time: Wed 10 Sep 2025 11:00:47 +0000
Manifest this update: Wed 10 Sep 2025 11:00:47 +0000
Manifest next update: Thu 11 Sep 2025 11:00:47 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: 9Srvq8K+h4H5R6zxkf3T6sMicGKFL/+3WhFrPbOAQBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:05:67:af:87:5c:c9:b9:6e:d3:15:c4:06:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Sep 10 11:00:47 2025 GMT
Not After : Sep 11 11:00:47 2025 GMT
Subject: CN=6a069d0b9cff7b743be72e17953348b1e5f6e931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:c2:86:1e:ca:6a:23:8f:33:e5:cd:5a:a5:
68:0d:2d:c1:df:12:31:f6:f3:9a:44:d9:ca:73:e4:
20:bd:8e:46:1d:36:50:06:84:7e:5b:e5:81:65:34:
e1:17:ae:b1:b7:00:c5:0b:70:0d:43:96:e5:fb:56:
c0:13:7d:2a:43:3f:e9:41:0a:88:32:5d:06:f2:42:
45:66:6c:18:0d:13:b6:e6:1d:d6:88:4d:49:81:66:
d2:f1:4a:1a:d1:d8:e8:05:00:d1:16:bd:d0:c0:44:
71:aa:d2:6f:1d:a2:93:14:18:cf:0e:25:42:d1:79:
da:de:29:18:bd:97:15:15:bf:5e:02:bc:b0:5c:8a:
2c:eb:88:58:4d:89:36:03:30:70:1a:84:b2:4e:6f:
b7:96:41:86:2d:3f:03:1b:f6:33:f8:d4:4b:a1:67:
df:0a:3a:f3:68:e9:33:d0:2c:26:57:3e:fe:3b:41:
f3:07:07:3c:72:20:c3:e5:45:f0:39:2b:e2:4e:c1:
49:40:35:04:59:84:05:10:46:a2:85:71:80:42:44:
33:50:12:f5:2d:58:0f:26:5d:1e:f7:18:4e:39:9a:
49:8b:e8:1f:ce:c7:32:08:8c:45:7e:de:99:54:6d:
fb:c3:c3:43:93:c9:67:29:fd:63:4a:51:84:d5:23:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:9D:0B:9C:FF:7B:74:3B:E7:2E:17:95:33:48:B1:E5:F6:E9:31
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:47:f5:22:e7:8f:e7:a1:51:69:81:b3:b0:c1:68:d3:a7:b6:
52:a9:5c:d7:ae:48:98:79:a6:71:61:fc:34:6a:bc:96:0f:bc:
25:eb:ba:d9:6e:8d:77:77:5d:c5:f5:67:85:ca:d0:3b:34:de:
49:2d:6b:6d:1f:db:1d:12:a1:11:b7:ed:ab:7c:ee:4d:37:0a:
86:d8:cd:28:49:88:b9:75:2c:1f:9d:5d:60:18:cf:a2:ce:71:
2e:21:90:99:33:57:5f:d5:ed:65:fc:3b:24:d5:76:3d:63:04:
b8:79:f0:68:bc:b6:a6:cb:b4:63:4d:54:ef:5d:05:ca:51:d0:
03:a6:29:10:6f:2d:4f:84:5d:2c:ec:86:2c:d9:df:24:73:84:
88:04:22:83:1b:8f:c2:50:72:69:3c:66:f8:7c:ac:64:db:e2:
45:c9:5a:d9:7e:46:ac:47:b0:a9:aa:00:f0:6c:96:3c:a8:09:
55:5b:5b:9d:89:b4:9c:15:18:f2:b5:c9:38:b6:a1:65:3c:f0:
eb:93:e3:c5:f4:ad:91:62:bd:38:f7:59:fa:f0:a8:49:7c:1c:
49:7c:2c:d8:c9:99:ab:34:c8:e7:97:fd:12:6b:3a:ef:9d:64:
5a:ad:10:6b:55:f9:f3:a9:e8:f2:29:ee:69:00:c0:b6:68:a6:
5e:77:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:10:10 2025 by rpki-client