Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: zWAJxuKC2i1jHxYF+hAOsyLmOxCBE6tgzUFZXajrWGo=
Subject key identifier: 85:35:FC:1A:F0:77:2B:88:77:C7:61:64:5B:2C:71:5D:A5:90:D6:E4
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019923D5EE786B96B071391BCCFA59DB8837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:46 +0000
Manifest this update: Sun 07 Sep 2025 11:00:46 +0000
Manifest next update: Mon 08 Sep 2025 11:00:46 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: JXtdDPc5LmLUKKo1zBcCSeZ0YDW22xv1HaFAxTw5HXk=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ee:78:6b:96:b0:71:39:1b:cc:fa:59:db:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Sep 7 11:00:46 2025 GMT
Not After : Sep 8 11:00:46 2025 GMT
Subject: CN=8535fc1af0772b8877c761645b2c715da590d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:3e:53:01:3a:a4:a3:fc:d9:87:bf:d7:2d:
66:d6:15:fc:6f:49:c4:08:f1:3b:46:1a:1f:b8:0c:
a1:0e:1d:e4:31:ce:bd:96:96:cd:e1:34:fc:a7:c9:
15:0b:74:a4:4d:06:fd:1d:a3:2a:73:5f:4e:76:06:
5b:3c:4b:33:b6:fd:b0:a0:9e:d4:d8:fc:8d:6d:42:
3a:cf:3b:99:c6:0e:d1:43:51:65:cb:69:da:bf:db:
f4:27:b1:51:bd:9b:09:9b:75:b4:10:59:c0:ad:a6:
60:75:48:ac:8b:e4:da:92:71:b2:44:a8:44:0d:6a:
b8:1f:38:54:81:62:c1:81:04:b9:c3:c9:a5:4c:e2:
1a:dc:08:57:89:de:df:52:2d:ff:20:97:bd:68:c8:
0e:82:8f:5c:16:48:8b:1b:5a:e1:21:c7:9f:a7:8e:
af:d8:c4:6d:fe:0b:78:b8:d6:20:84:9e:33:71:33:
fe:f4:97:f2:6d:94:9a:6d:22:c0:ad:24:20:aa:71:
30:4f:e3:87:55:e8:a7:90:93:62:bf:b0:3f:00:57:
00:96:72:80:1f:a7:15:a0:5a:01:ec:cf:0a:99:02:
ac:ad:6e:d8:66:1b:5e:fe:2c:cd:ac:a2:6f:39:8f:
37:e6:3a:47:ce:db:83:ab:1d:eb:94:39:89:54:ec:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:FC:1A:F0:77:2B:88:77:C7:61:64:5B:2C:71:5D:A5:90:D6:E4
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:60:cf:a0:69:46:55:5e:64:6a:6d:c8:30:dc:50:eb:a8:
37:92:c8:c3:6e:a7:9b:16:1c:d7:61:df:4d:0f:40:7d:7a:87:
a6:41:8c:cf:b7:3e:a9:77:10:4f:ee:a1:87:76:99:34:be:31:
d0:6a:52:20:2e:17:2b:a5:82:f8:3e:ae:87:c7:6f:a0:cd:b6:
c4:29:75:0e:53:47:37:67:96:94:e5:96:ef:f5:8b:27:aa:0c:
b3:44:7d:4c:39:86:1a:16:8a:ec:e6:dc:0f:b7:2d:15:70:bc:
86:67:06:b3:55:e4:5e:70:78:a1:92:16:0f:ce:9f:f4:f2:0d:
f5:e5:d0:33:e1:c0:21:6e:e8:55:1b:25:ad:d9:da:97:4a:c7:
8a:5a:06:c2:19:bb:b8:96:d9:e3:07:aa:eb:83:70:71:c8:42:
5f:a2:18:d3:c3:1a:d0:8d:f8:48:41:7d:f3:6d:b1:f3:56:52:
81:9d:4c:11:04:2c:14:29:25:d6:01:2d:6f:d6:84:0c:69:a4:
7c:49:45:09:e6:43:18:93:2a:17:5e:51:d5:ce:05:ac:14:78:
f4:46:5e:e2:39:21:c9:cd:d6:82:9e:b1:81:5a:0a:62:25:b2:
e7:d8:29:93:38:71:8a:62:87:19:d3:a4:bc:6d:9e:73:b5:62:
9b:a5:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:17 2025 by rpki-client