Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: ehSxpttCQV4hVi8o1ho+UkIXv1gPyDoxr47D0rANVw4=
Subject key identifier: 50:A6:EA:FE:8E:69:B0:13:A5:E2:92:04:6B:FA:18:64:7F:2A:FE:4D
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 0198D4A78682CDA28D6140C9B8E31F145D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 067F
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: HL8AfpczBsvD0lvcDrDd3KjZ+nDXK7dHBrOfleGCaog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:86:82:cd:a2:8d:61:40:c9:b8:e3:1f:14:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=50a6eafe8e69b013a5e292046bfa18647f2afe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:8a:5a:b3:3f:dd:d0:7f:86:4a:fd:42:7c:
87:09:33:e0:c7:65:77:e6:e1:18:4f:88:6e:ad:b3:
dd:f4:25:8f:bf:d7:7e:bc:bb:3d:32:f1:cc:c7:ca:
b1:a6:9b:88:69:7e:d0:64:8f:06:90:17:de:58:ab:
6b:5b:8e:b7:59:f6:e8:44:40:87:55:77:1f:c1:80:
63:4e:d2:71:de:21:2f:04:c2:7e:0d:3c:98:4c:fb:
3e:f3:1b:80:37:a2:46:a0:b5:ac:96:74:47:4f:09:
3a:2c:7e:6b:05:f7:c2:0f:d7:9d:75:e8:69:c3:b5:
02:a8:54:ef:22:66:7c:4d:84:b3:6c:42:29:c7:a3:
22:a2:81:54:b4:f2:df:ac:83:52:20:98:2e:90:ee:
98:04:24:41:72:ed:57:85:d8:b4:42:10:8b:7d:2a:
ad:c9:6c:a1:86:d6:9b:8b:49:cd:63:69:30:64:22:
65:9d:0a:7b:26:60:0e:3f:bf:00:7b:c6:5c:0b:a6:
51:d1:7a:45:de:4a:1e:6d:a0:7a:e7:a8:c4:73:42:
cd:08:80:92:4a:b1:b4:05:f7:52:fe:e7:b3:c1:dd:
50:73:e8:c9:1d:f6:8c:b2:97:9f:d3:92:3a:28:26:
82:79:1f:bd:63:89:9f:56:f4:3e:ee:99:be:b8:1a:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A6:EA:FE:8E:69:B0:13:A5:E2:92:04:6B:FA:18:64:7F:2A:FE:4D
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:c0:bb:94:78:c4:a1:0b:a0:e7:f5:4a:03:ca:79:08:87:
ac:3a:b6:5e:60:45:63:cc:53:c2:05:60:5b:86:20:3d:f6:9f:
08:3c:ca:4b:45:60:ba:f9:98:eb:5f:b5:ba:a9:a7:26:ae:e5:
af:80:49:81:d3:1e:92:5a:1c:6c:ce:82:5c:13:59:6b:29:5c:
a4:fd:3d:1b:f1:72:f3:ef:b6:29:28:1a:54:e6:36:05:8c:77:
83:b1:c9:6d:cf:2b:67:68:2e:eb:68:54:e7:dc:b3:aa:73:93:
38:25:8a:61:56:a0:11:fb:ce:7f:2d:32:b8:55:32:0f:d5:7a:
17:6c:bd:53:3a:6f:5f:18:a4:75:fc:42:50:82:96:07:0c:6e:
9b:45:57:6e:db:08:ea:fb:c4:3a:f6:5b:c7:2e:96:80:de:e9:
93:f7:c0:d3:b4:c7:80:c4:54:60:ee:82:b6:e7:2a:ba:d7:58:
2a:17:58:85:7d:19:90:44:99:d1:af:5c:0f:1a:f3:3e:c2:47:
02:c6:af:ce:7f:24:16:d4:64:cb:bf:2e:70:1e:f6:0f:58:6a:
d7:50:6e:bc:5f:08:b8:1b:aa:ca:10:cf:0a:e6:85:f6:d3:12:
cc:90:88:6a:29:c6:55:ca:3e:f5:9e:10:0f:a1:49:0e:a7:19:
0c:a5:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:57 2025 by rpki-client