Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 6x7eZXirwS9yfQqOquH+uHR7Hq8oJjxE+f0IQHgOYaY=
Subject key identifier: 2B:F1:19:4E:74:D9:4B:D5:E1:10:50:77:5C:19:28:1E:87:B0:BB:9C
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 0198D6602C3FDBF7A032B21D61BDA05D3159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1272
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: cQsO4EzZ2shgIk+c/B/hsdkFI8okkTGzFBST75ZtB40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2c:3f:db:f7:a0:32:b2:1d:61:bd:a0:5d:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=2bf1194e74d94bd5e11050775c19281e87b0bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:30:75:f9:94:d5:1e:23:b7:a3:62:25:d5:
d7:d6:51:25:25:7d:aa:ae:2a:9d:b0:91:c0:0c:22:
a1:00:00:ad:06:6c:72:f5:aa:58:9b:f6:ca:fd:ff:
71:c8:48:7c:fc:1b:d8:f1:ce:c4:31:88:46:b0:07:
3f:fb:48:e0:43:0d:5c:fe:12:ea:27:31:b8:a4:a4:
0b:38:1f:43:ab:41:1b:8f:d2:10:3e:b7:a6:03:f9:
33:4c:3a:3c:e3:8d:dc:9e:ae:46:0a:5c:45:64:f6:
46:31:eb:00:1f:c9:94:a6:02:e2:89:30:94:97:0a:
2e:12:e9:52:74:6b:d6:7c:ad:7c:b3:9b:38:eb:51:
ba:ab:65:94:32:6e:4b:70:39:7f:71:ba:2e:05:e3:
62:01:bf:0b:a6:61:57:06:01:05:9d:2d:d6:6a:3f:
7f:84:d8:34:9d:67:fb:b1:f4:9a:f5:ef:21:ee:d3:
26:4a:aa:c5:65:a8:c5:83:a1:37:22:ed:28:24:5c:
86:1b:8b:82:a8:ba:64:09:5b:76:bc:c6:48:6b:3e:
12:20:28:54:61:72:cf:3a:e7:4a:5e:50:8b:85:32:
9d:31:6e:5f:92:63:ab:fe:3d:d3:58:53:a1:c6:27:
92:21:31:26:08:18:35:87:5e:18:96:21:74:c7:86:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:19:4E:74:D9:4B:D5:E1:10:50:77:5C:19:28:1E:87:B0:BB:9C
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f6:bf:f4:fb:09:36:8d:bd:dc:78:c3:e0:9a:ba:7f:6d:06:
3d:45:14:f0:5b:0e:c9:e5:51:df:b2:6e:3d:41:fe:04:e6:bb:
cd:1b:a7:37:7d:7f:8a:36:68:6e:b1:57:e4:26:19:8b:0d:27:
51:b7:df:6a:37:78:c2:bd:96:fa:01:19:db:f7:b9:03:06:ad:
07:29:72:b4:4e:ff:5f:36:aa:05:a3:f8:96:50:1e:43:d9:d6:
4d:0c:08:21:a1:f4:9d:45:88:65:9b:e6:34:33:bd:e9:8d:f3:
74:c9:ec:2e:a9:8e:32:4c:22:3d:17:24:75:86:9b:4f:a0:cc:
04:9b:55:de:af:33:cc:de:25:e6:c2:4d:66:30:92:10:39:72:
20:20:cb:8b:a8:0b:d4:46:e0:f9:84:2e:33:53:ba:ef:44:b9:
8e:55:91:6c:fd:45:78:ca:3c:48:8d:65:a4:0b:2e:21:04:74:
2a:16:3b:64:1f:ce:ab:f1:95:da:59:e4:ed:3a:35:aa:79:a8:
bd:39:f5:8e:76:d7:a4:46:b7:b2:1b:56:f5:3c:c3:e6:0d:90:
05:e1:92:d6:66:c5:65:b0:69:42:21:2d:d9:43:14:91:a9:ec:
f6:39:79:a7:63:96:9e:38:42:53:45:78:db:ce:ab:69:e5:48:
17:43:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:51 2025 by rpki-client