Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: 0LLC5oVV3Z6lY/ByKDdqI7eb1JloMcjBPvajJgFtl2k=
Subject key identifier: F3:66:F8:41:F9:21:32:C6:0A:6F:7B:84:0D:E8:D6:54:DC:41:D5:F4
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 0198D7E18E187ACCDA3EF07D266A6565E89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1234
Signing time: Sat 23 Aug 2025 17:02:20 +0000
Manifest this update: Sat 23 Aug 2025 17:02:20 +0000
Manifest next update: Sun 24 Aug 2025 17:02:20 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: I/qLyp77rrLb9ylvC/7dQHXvSDkRjiFP47Z2ggq67TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:8e:18:7a:cc:da:3e:f0:7d:26:6a:65:65:e8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Aug 23 17:02:20 2025 GMT
Not After : Aug 24 17:02:20 2025 GMT
Subject: CN=f366f841f92132c60a6f7b840de8d654dc41d5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:de:25:54:8c:87:02:df:cf:58:85:3a:43:
6f:f9:54:42:74:f7:d6:a7:ac:a5:3d:17:1f:80:2e:
e8:8a:b1:40:cf:a9:7e:36:27:f5:06:2d:0c:2b:2e:
41:a7:d6:46:24:61:41:c0:67:16:67:c2:f4:d7:95:
47:3a:7f:e6:ba:69:7e:2a:a3:73:5d:53:42:8a:f7:
1a:ce:fe:18:5d:7d:e5:7f:86:03:32:65:13:48:ee:
f7:5e:22:c6:75:81:dd:76:c3:f9:0c:c6:2b:7c:6b:
4b:22:14:2d:5f:be:55:2c:88:79:ea:08:21:22:ae:
1d:c6:e3:e9:6a:c9:fc:9b:f1:24:40:09:26:c7:ea:
4b:13:db:27:8b:37:00:2c:d4:21:24:73:fe:df:f3:
c1:33:2a:d0:7e:c3:77:72:94:4c:f8:a4:eb:68:97:
7f:28:0b:b8:5e:85:7b:29:24:e9:bc:dd:a1:04:c1:
c4:fd:10:59:7b:82:4e:52:22:ba:fb:16:bc:1a:d0:
1f:74:e6:cf:65:43:5e:d4:a3:2a:79:54:72:75:e5:
8f:d0:8b:30:e4:31:ba:b9:44:b7:b3:b1:7b:dc:58:
79:4e:35:90:7a:92:2d:2b:46:d6:6f:a9:30:8d:4b:
5a:11:52:42:10:c4:25:4c:05:bf:62:94:17:46:fa:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:F8:41:F9:21:32:C6:0A:6F:7B:84:0D:E8:D6:54:DC:41:D5:F4
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b1:19:f9:2d:31:fb:e7:0c:cf:9a:e4:a8:e9:dc:0e:1d:f1:
ac:2d:16:a8:c6:ab:dd:66:b4:b9:54:12:4a:ec:5c:df:93:84:
1d:9e:4a:df:00:4b:4b:23:89:92:98:53:0b:7d:a7:f4:06:9d:
fe:bf:02:4e:47:b1:1c:e6:03:c4:c1:b0:2c:88:0f:b6:d5:e3:
0a:7d:2b:58:1b:8d:a1:70:d0:49:03:50:52:3d:57:41:c1:d9:
01:22:0f:c0:b8:2a:0a:32:42:6f:1d:93:3b:f3:bb:a4:45:33:
45:dd:f1:a8:31:15:5f:14:41:30:50:ef:a5:f0:0a:8b:f2:3b:
6f:77:ae:cd:f1:59:66:f8:02:5f:fe:b1:f2:3d:a4:6d:ea:8f:
55:de:3d:5b:26:c3:66:c3:e6:b3:cf:f3:0b:62:65:c8:c1:76:
d1:ae:2c:4e:5d:11:ad:c4:ba:9b:5a:c3:05:7b:39:80:10:ea:
64:5a:e1:c2:79:d4:bc:2b:75:08:7c:97:ef:f2:2b:d5:ee:7c:
a9:6e:cd:18:70:0f:2a:02:25:f2:f0:d7:c6:5f:13:90:69:1d:
aa:4b:7b:df:c5:14:cb:62:ea:b5:1d:31:61:45:b6:1a:61:48:
46:db:16:6e:87:2e:35:44:37:63:fe:4b:10:0f:3d:50:9f:5f:
de:b8:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:27 2025 by rpki-client