Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: wXPxdDyD4E+eyRw77x/jn7GCYd8DGc8rJScAjOcyWng=
Subject key identifier: 0B:FD:9F:97:EF:AC:36:35:34:25:85:47:30:15:D8:07:C4:D7:42:7D
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 0198D54DFB62B3C279BEDC90C052D041B5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 13C2
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: ubCpgZ4oiWrknxP0nokFdctx2qMniWrdU54Yz8+bQPY=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fb:62:b3:c2:79:be:dc:90:c0:52:d0:41:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=0bfd9f97efac3635342585473015d807c4d7427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:53:57:aa:c8:9a:6d:9d:f0:b9:52:fc:0b:
b5:7c:6a:dc:9d:b1:d3:7f:bf:8d:f7:50:ab:9d:e1:
2c:cd:5b:8f:b0:57:20:a2:af:f2:49:50:c5:4c:06:
69:47:7b:d2:33:45:b4:51:df:7b:b0:e6:7a:49:df:
1c:83:01:78:ac:1f:cc:9a:55:0d:c3:79:1e:b6:7a:
e4:18:08:5a:be:e5:c3:82:51:a0:7d:69:79:a0:6b:
3f:cc:d7:29:bd:56:f7:ed:c0:9a:62:85:64:5a:69:
60:54:36:96:e7:fa:e6:8f:58:5e:63:a7:72:7e:b1:
ce:21:38:18:f3:67:4b:1c:b1:d5:8e:be:07:3c:4a:
3d:97:a3:07:8a:99:eb:ee:b3:47:6c:28:b9:93:73:
69:e1:90:c2:1d:ec:48:0a:98:6a:c6:80:af:fb:3a:
bc:b2:bf:0d:a6:36:07:3a:2c:f0:c8:1f:eb:a6:73:
cf:ee:de:8c:cb:bd:7d:15:2a:9e:9d:07:f2:d7:9e:
f3:fb:e4:2e:49:2a:60:30:b5:6f:ba:4b:a7:ad:13:
00:bf:29:7f:76:e5:8d:0d:e0:0b:c1:fc:6b:9e:50:
e3:5b:87:2a:9d:e2:59:4d:39:3d:6c:35:b4:9f:ec:
67:14:38:50:ff:c8:f9:e2:fb:34:cc:09:73:3f:61:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:9F:97:EF:AC:36:35:34:25:85:47:30:15:D8:07:C4:D7:42:7D
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:4d:30:a2:5c:be:60:02:d8:54:93:9a:72:73:d2:a9:0c:
1f:5e:5f:69:d0:6f:6d:ed:d6:bb:d3:7f:60:82:2e:7e:9a:c7:
f8:0d:4f:f2:4c:28:44:22:15:7d:a7:d3:a2:e7:01:d3:5f:54:
82:c8:8e:67:5d:91:b4:7d:52:e3:d2:ba:f8:d4:f5:c9:d4:e7:
55:e8:53:3b:3c:71:a7:16:00:e7:15:2a:25:67:69:ba:6d:82:
34:a3:62:3c:25:cf:7a:cf:41:6f:9c:a6:7c:4b:d9:2e:f8:e0:
5f:2e:70:e6:0c:1e:e7:62:7f:b2:6d:bb:a3:5b:88:30:76:64:
93:21:31:36:25:da:d0:b8:94:0a:8e:7d:61:be:f0:a9:f6:05:
3a:b8:09:d3:4e:e8:d6:4e:3a:62:67:ac:a6:65:95:0e:1b:de:
ac:25:44:6e:84:9a:90:60:6a:87:ce:78:34:b6:0c:9e:91:b3:
80:9f:e4:4a:40:28:ec:04:c9:93:0d:a3:87:8a:c4:34:d7:07:
3d:8a:0d:f1:eb:1d:55:01:e5:48:b6:63:50:b9:6e:9b:db:2c:
86:23:d2:79:f1:bb:17:9b:26:4f:93:b3:d4:e6:3d:46:a0:82:
43:85:8d:f2:ba:2b:71:1e:89:0a:5a:0e:54:52:39:55:f2:c0:
46:be:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client