Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: hSLKdboBZiIOIpEHHu5i6V0bBhk/QRbN5XIxneme1Oc=
Subject key identifier: D0:98:55:C7:2E:8B:30:65:4E:80:06:F9:87:F1:54:44:01:49:C1:20
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 0198D4E067DEA1802B588B38C757C0014BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 1087
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: VIZGrQJfAMiKypYVY4qUvJgDVG6z/qvSuJ9OA2KVIqY=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:de:a1:80:2b:58:8b:38:c7:57:c0:01:4b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=d09855c72e8b30654e8006f987f154440149c120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:d0:a0:e8:f1:11:72:d6:93:95:92:c5:e1:
ed:ba:5b:5e:32:70:e3:ad:57:6f:69:3b:6d:a6:57:
df:db:80:91:ef:ba:15:0d:0e:c7:06:59:87:b5:27:
8d:67:31:fd:a2:fa:1a:ad:b1:ed:02:1d:22:85:a2:
66:e3:74:55:89:16:7a:71:c8:e4:c3:a0:b1:ed:ac:
88:1a:7e:a9:c3:23:6d:ee:4a:21:5d:2d:90:4e:e4:
f9:36:d1:df:ed:69:c1:01:5b:32:00:07:5e:41:2e:
b5:df:92:58:bf:8d:3e:5f:ca:12:b2:8f:6c:2b:bf:
45:38:14:76:a5:d3:82:c1:59:2f:95:d9:38:39:5f:
31:7a:76:50:30:4a:35:77:3e:74:e4:6b:77:32:40:
8c:cb:c0:76:90:a8:d3:5c:3f:b9:50:09:b0:06:a6:
5e:4a:35:7a:01:03:18:6d:7e:ea:61:7c:13:83:55:
59:6b:7e:12:08:a7:00:0c:10:b8:1e:11:3b:56:e5:
28:72:81:72:87:53:5f:96:1e:f2:01:6c:4a:be:ba:
13:9e:c9:73:75:13:6a:64:c1:dd:c6:c0:4f:a9:33:
97:56:54:96:d5:b7:d1:3e:8d:f1:d7:15:91:59:b3:
ac:e4:73:05:50:01:b0:d9:0e:a7:d4:7b:89:51:d0:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:55:C7:2E:8B:30:65:4E:80:06:F9:87:F1:54:44:01:49:C1:20
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:df:ef:43:ff:95:5c:2e:39:d0:3e:be:91:fa:01:0e:17:8d:
8e:09:c9:83:e8:1e:5c:27:90:57:e3:44:9a:0a:5f:f7:6c:19:
9e:42:e1:cf:2c:2f:9d:d1:dd:32:45:34:a6:bc:be:03:06:e8:
51:2d:c6:a7:26:93:0d:ee:a4:34:9d:30:a1:95:b9:c1:0c:88:
6a:3b:1a:ee:70:b0:53:8f:2e:31:43:53:c1:00:af:1c:9c:70:
c4:94:ee:cf:1e:42:4d:9f:9b:8d:1c:ff:2b:72:37:91:ad:57:
30:a5:50:4a:b7:ed:6d:ac:53:8c:23:2c:c0:46:49:c3:c5:78:
e3:43:5a:31:2b:d0:6b:9f:be:de:64:c9:68:84:5c:94:07:b0:
08:90:24:97:9b:24:1c:de:e5:73:da:9e:a7:36:80:f6:c9:f6:
90:40:48:f0:a1:05:61:18:6a:c4:e5:f6:c3:a7:e2:d3:80:48:
57:11:b3:33:02:e0:92:06:b2:99:9e:6d:38:d3:07:7c:f4:42:
f2:ec:54:9f:c4:2c:3d:b0:80:fa:0f:4d:b2:29:87:44:2c:05:
aa:54:97:8f:bc:e0:3e:33:3b:92:fd:45:dd:7e:c9:8d:f3:4c:
1e:8f:1e:40:79:41:8e:fc:bb:94:7d:32:5b:73:5e:f9:3b:ae:
1e:e5:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:40 2025 by rpki-client