Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File: k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier: JsTJFlED1Eg+4TC60deGriXjs7OYlPIySSIUPoVcuD0=
Subject key identifier: 8E:9A:40:D5:61:6B:CA:3B:7C:CC:DB:31:57:AB:75:85:B2:0D:D6:1C
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial: 0198D5F1A29DECF8EE092E0175440A63A9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number: 05A3
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: KKA1IWutcoxDs/XW3JlQ7Hf2/jpJL1Lo6f8Z8/m5ecI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a2:9d:ec:f8:ee:09:2e:01:75:44:0a:63:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=8e9a40d5616bca3b7cccdb3157ab7585b20dd61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:e8:4d:6f:91:f3:3d:94:cf:f6:76:97:f2:
63:61:49:ee:78:79:15:01:65:da:ca:f2:cd:2a:24:
8f:82:0c:f3:4c:42:16:e4:dd:cd:fe:f6:47:c8:1a:
cb:39:84:7e:32:05:57:dc:91:76:e9:b4:da:37:c0:
cd:9f:fd:e2:aa:f0:ea:e6:f1:4c:f7:c8:21:a1:b6:
e3:75:1a:8b:d7:9b:6b:f3:ac:2d:b3:2e:e6:3a:01:
24:26:39:d6:86:84:a7:c8:a0:4d:15:f1:ba:8f:2e:
a3:53:43:f5:38:eb:2c:6c:34:d4:72:84:39:ce:ff:
ad:fb:79:6e:2d:c8:70:79:7b:41:8a:ca:b9:b7:59:
57:15:5f:c9:17:c6:8c:55:aa:62:c1:2d:5b:a1:80:
3c:b0:30:84:58:cf:c1:eb:ad:3a:e2:64:58:ab:25:
da:04:45:a1:21:a2:17:c0:db:53:4d:27:99:0a:fc:
b3:f2:39:d5:a6:fc:fb:84:31:70:08:af:93:d8:b8:
c7:7e:8b:ee:e3:fc:a0:7e:81:eb:cb:4b:dd:9b:b4:
7f:07:48:7e:f5:49:4e:c6:a3:db:1c:3c:16:f3:a9:
71:59:2c:3f:7b:01:28:f8:21:49:d1:4b:f1:34:cf:
e2:21:f4:f7:65:ad:f7:71:e6:29:0b:7f:01:12:a3:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:40:D5:61:6B:CA:3B:7C:CC:DB:31:57:AB:75:85:B2:0D:D6:1C
X509v3 Authority Key Identifier:
keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:7e:98:6d:ca:e5:5b:f4:37:3d:1e:f5:b1:f4:a4:1c:50:
14:28:4c:44:82:8f:c0:a6:95:70:fe:f9:6b:7b:90:d4:97:ba:
02:76:4a:8c:fd:d8:ee:3d:d1:7f:7e:c3:1c:df:24:aa:c7:7d:
1f:63:09:9a:bf:d9:ad:4a:36:0d:a3:a4:05:0e:1c:13:11:5d:
03:09:b5:4a:55:44:5a:43:ff:ab:9e:61:ca:64:96:04:f8:e5:
2a:3c:ab:27:0b:bb:63:35:58:e7:80:71:d6:b5:64:9e:40:48:
2f:53:f6:09:d5:c5:cf:e3:68:c4:d4:e7:63:56:d4:49:48:70:
19:d0:63:80:70:5f:c0:4f:f3:2c:e9:fb:3a:f1:f4:c0:aa:d9:
65:95:b9:d0:40:1c:69:58:8e:c1:d0:10:62:f4:87:76:5b:65:
80:61:d3:9a:2f:b5:b1:8b:b5:9c:c5:1d:ca:68:55:78:09:58:
12:bc:09:bc:78:26:70:25:f6:3c:50:e0:0a:84:40:c8:d0:00:
a0:ad:75:0a:b0:6b:a3:83:03:25:7f:69:83:36:30:6a:b3:6c:
53:e2:d1:6f:d4:07:d0:32:f7:20:50:43:e3:f9:f7:85:1a:fb:
d5:ad:6e:c4:33:b0:b9:75:fa:2a:e9:23:da:c4:d2:3f:91:a2:
9d:20:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:26 2025 by rpki-client