Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: WLaLN8xr/w345FOvXl1i6abMs83I5ggCDRANFiSsyr0=
Subject key identifier: CB:61:02:D6:8A:6F:05:10:13:85:4D:39:D1:4E:42:6B:FA:80:97:16
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019922C32BC5729A009983601198C6A4DE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 053A
Signing time: Sun 07 Sep 2025 06:00:39 +0000
Manifest this update: Sun 07 Sep 2025 06:00:39 +0000
Manifest next update: Mon 08 Sep 2025 06:00:39 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: mUW9jNp7/GV6s+WQhULIrCcZCGmIQjs7h8cgaqEKZwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2b:c5:72:9a:00:99:83:60:11:98:c6:a4:de:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Sep 7 06:00:39 2025 GMT
Not After : Sep 8 06:00:39 2025 GMT
Subject: CN=cb6102d68a6f051013854d39d14e426bfa809716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:a1:6c:55:fa:1c:4f:a8:5b:22:0f:88:de:
e3:b5:f3:5c:cb:8d:63:1b:db:0b:fc:8b:a6:d2:48:
4e:13:68:20:4d:57:18:48:00:f7:19:28:05:6a:79:
f8:34:8a:70:3a:ea:22:cf:fc:bd:57:7a:c4:62:7f:
68:8c:f9:66:c3:3f:36:56:50:08:31:0a:8b:a5:bf:
be:0d:56:e6:89:0e:e7:11:ff:23:d6:dd:ae:a8:2d:
0a:cb:35:db:d7:80:18:da:37:a6:7f:50:de:38:ea:
0d:18:e2:db:3a:0f:c5:58:f7:16:5d:08:c6:9e:2c:
84:1e:7d:8e:49:23:41:03:16:70:43:10:7e:62:e4:
70:6f:61:9e:d8:96:01:db:4d:c6:3a:71:49:e7:3a:
c9:79:a3:e0:ef:60:0d:df:02:cb:be:eb:50:77:02:
99:d6:43:12:15:99:db:d6:ca:bc:41:fd:15:f8:fa:
5f:28:0b:10:fc:ee:30:23:0c:48:02:74:cb:8e:5f:
dd:4c:f8:13:0d:78:5f:9d:11:3c:f4:d1:69:bc:54:
1d:fb:e4:bb:b8:91:4f:18:44:6f:35:09:86:de:6d:
f5:f2:bb:8d:19:bc:94:9f:7f:37:7f:2c:bc:94:9f:
26:47:45:22:ac:f4:16:e9:83:f8:eb:0f:fa:14:d8:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:02:D6:8A:6F:05:10:13:85:4D:39:D1:4E:42:6B:FA:80:97:16
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:00:43:3e:c1:bb:43:1c:52:27:9a:96:79:57:71:93:cf:bd:
cf:5e:2a:b2:15:c3:95:39:16:40:83:6c:eb:1f:10:51:1f:86:
45:e9:7a:df:73:a4:1b:28:1c:7d:89:56:d3:d0:15:e7:41:6e:
83:a9:7d:4d:43:52:92:8a:f7:4e:67:f3:3d:f5:56:19:38:6d:
ff:03:7f:29:70:43:34:20:ca:f0:73:cd:fe:87:5b:b1:b9:6d:
bb:47:7f:0e:33:c1:02:42:2f:6f:d3:4d:11:97:79:41:0d:da:
7c:e5:80:ad:78:6d:9b:a4:90:f8:9c:19:f4:39:66:82:37:08:
1f:03:a3:d0:a2:fd:8b:e1:03:e4:a3:90:b5:42:9e:8a:70:f9:
73:a8:42:80:99:77:3d:0e:df:5b:99:75:4e:81:cc:97:ef:ed:
ec:fc:5b:19:76:98:0f:e0:0c:36:91:00:9c:42:80:20:21:f4:
67:49:73:74:69:74:94:68:52:f8:98:2c:94:4b:9c:d2:b8:f6:
90:3c:b5:5b:f9:0c:15:3a:08:0c:9e:6d:4e:4d:35:eb:37:af:
33:3c:10:b1:7f:ed:d5:d1:7e:70:8e:9e:c9:ec:2c:17:4f:d4:
a7:48:aa:3a:3e:e3:3f:d0:c4:b7:87:21:8f:a7:a2:5a:3c:96:
6d:c2:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:44 2025 by rpki-client