Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: EGOMeBfznssiihdv3jToISvBs/PSRBXf5+5iMbbGtU8=
Subject key identifier: 48:75:BB:FF:58:FD:7D:FC:52:D1:E3:F8:C7:B5:1A:27:E4:D8:6F:A6
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 0198D54E5EBBF388A1B0ABE0281936A51183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 026C
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: acfagTvQ8gE7yjafNTitePNK/ENJF3/5USUrShPLHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5e:bb:f3:88:a1:b0:ab:e0:28:19:36:a5:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=4875bbff58fd7dfc52d1e3f8c7b51a27e4d86fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:11:ea:5f:81:f5:60:8c:3f:81:f4:6a:e7:
b1:3d:97:52:cb:40:23:f4:20:ff:b3:1f:16:e2:3a:
a3:58:6b:78:d7:25:21:b7:4b:60:96:37:e8:17:a2:
55:94:20:c8:49:88:2e:bd:92:8b:27:7d:01:72:6f:
b6:29:e1:b9:48:31:80:d9:1f:39:fb:06:1b:10:fe:
d1:7c:db:45:d5:26:3d:b4:1f:94:a6:7b:98:29:b0:
ed:a2:4c:f7:29:42:2a:7e:cb:45:03:0d:1d:8c:27:
92:22:a8:26:26:a5:f2:12:80:8f:fe:9e:8e:c4:7b:
b1:df:25:29:66:88:d4:96:c9:2d:92:54:c5:bc:12:
99:33:75:a3:3d:d7:ac:cc:ef:1c:99:d9:e3:3a:4a:
48:c8:4b:36:11:7a:4d:cf:68:f7:90:3c:5e:dc:34:
f9:9f:3e:94:0f:d8:a9:e3:6d:2e:66:3c:c8:02:85:
a5:91:dc:9f:2c:33:a7:c1:ea:bd:f4:d5:ec:c1:d7:
08:48:9e:5f:f6:c7:56:64:66:86:4a:a8:a7:6e:fe:
fa:88:61:eb:3d:0b:2f:7d:f9:bc:f9:55:fa:23:3b:
66:51:66:7e:d6:9c:68:70:06:93:a6:d0:37:33:c3:
6d:25:1a:54:58:dd:58:fd:58:7b:8e:2f:ff:0a:9b:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:BB:FF:58:FD:7D:FC:52:D1:E3:F8:C7:B5:1A:27:E4:D8:6F:A6
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:d2:c0:39:f2:1c:23:cc:7f:98:09:94:09:dc:2b:3b:94:
58:da:8e:4f:94:25:52:f9:da:f1:82:96:19:66:9a:95:30:12:
13:3d:66:b6:ce:6a:75:5b:83:d6:4a:8d:4f:73:a4:ab:75:34:
e7:ec:fd:00:89:be:15:f9:f2:6b:17:f2:3d:ba:4b:d1:b1:d2:
2d:02:4d:6c:4b:b0:eb:12:04:86:e3:ab:d9:e4:fb:6f:42:66:
4f:3b:7f:91:63:79:a6:48:61:72:49:20:8f:b4:c9:00:0e:03:
d3:ea:22:96:08:2c:60:87:eb:b5:02:0f:09:9b:44:1e:5d:0e:
75:6a:39:76:9d:4e:d2:e4:e7:89:7f:25:6f:af:d9:8b:72:d7:
ee:27:d7:88:78:e8:25:15:47:e1:18:b8:39:e9:b3:cb:4b:9b:
e8:3d:86:04:13:db:21:21:52:87:4d:ad:7b:f1:5a:5b:b1:99:
c9:c6:c2:04:21:d7:51:1a:47:e7:fa:0b:53:35:a3:9f:df:65:
1b:6b:25:bd:26:71:bc:d0:16:29:5d:93:80:87:9d:44:7a:a9:
49:65:4e:b2:c2:8f:86:73:d1:3d:25:cd:90:1a:a1:e9:2e:6f:
82:4a:f6:dc:1b:67:dd:a3:ff:62:0c:54:37:f8:4d:f9:2a:fc:
2d:c9:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:54 2025 by rpki-client