Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File: oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier: VjqUQ5dgP42siLE/j0u12HnQ+befl+cAtC3+CdneF2A=
Subject key identifier: 71:83:D8:A1:07:52:E6:DA:A2:80:E1:DD:91:32:28:04:8C:39:93:AE
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer: /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial: 0198D6608587C232845AF0EE5AEC462D03BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: YAoUenHihT4DQlafryFUSek-9CM.roa (hash: U8ZmX/KGlPOXoWxEXiPpdG5cQfV6PXbF8uCn/cMmNEA=)
2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: AknzHDtAeQP5i9sKAIv3mesaKfvosAmXGTD8gwUNh7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:85:87:c2:32:84:5a:f0:ee:5a:ec:46:2d:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=7183d8a10752e6daa280e1dd913228048c3993ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:a0:ec:81:16:9b:17:68:a9:a4:27:95:fb:
fa:ed:c8:3c:ce:87:76:26:1b:70:7c:4b:45:ad:cf:
99:66:6f:ff:b4:ed:63:d7:53:d1:b5:97:76:c7:09:
d4:e8:96:b1:b3:49:85:66:6c:c9:73:e5:5d:d9:64:
5c:18:80:6c:ad:67:04:44:89:2f:2a:c8:bc:16:d8:
5a:cf:c7:d8:5e:79:5a:24:e7:bd:0d:51:9f:08:ca:
27:b2:58:84:54:42:eb:86:f3:69:d2:38:30:dc:1a:
fe:48:f2:f6:cf:4f:56:f5:be:bc:1b:4f:94:cd:32:
d9:c5:f8:d7:6b:d5:d6:9b:42:22:c0:3f:3e:a3:4e:
49:6f:8e:f8:73:13:7e:9d:27:59:55:24:17:ae:6d:
dc:e5:89:62:44:1f:a5:b9:6d:16:1a:06:80:5c:80:
48:e3:7d:26:b8:84:f7:73:6c:c3:c6:6a:a6:ac:b6:
d5:fb:84:f7:c5:c5:67:be:5d:13:99:0e:92:e5:14:
8b:f4:88:22:44:45:12:00:af:ee:4e:db:79:a4:af:
10:69:d4:d8:9d:5e:21:64:70:ef:a4:75:2a:91:1e:
78:07:8d:41:c3:49:90:ab:5b:cf:30:a4:e4:d9:bf:
2d:5a:5e:57:0c:68:81:b3:d9:09:9e:6f:87:c7:56:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:D8:A1:07:52:E6:DA:A2:80:E1:DD:91:32:28:04:8C:39:93:AE
X509v3 Authority Key Identifier:
keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:f2:ce:b6:50:c3:6d:bb:30:d8:9a:98:2a:dd:3c:95:34:
9c:a7:43:25:70:dc:ff:56:20:f5:aa:58:36:cc:86:bc:9c:f6:
f1:fe:d2:df:45:d3:6a:63:2d:d9:1e:77:e1:36:2a:82:51:34:
93:58:ac:8c:bb:20:99:f9:6d:ee:b4:39:fb:64:c8:24:39:a7:
0c:c7:a5:5b:6d:93:8b:a5:8a:16:34:30:0d:a8:f1:89:c9:b1:
a2:ab:3f:10:ec:fd:68:06:53:39:a2:65:72:be:8f:74:eb:cb:
48:a2:9a:ad:68:d5:8b:f2:ff:81:07:28:ad:bc:e7:43:e3:5a:
b2:b4:8e:f3:a9:26:c3:18:fa:77:27:07:db:e4:b6:91:7f:0a:
83:f1:d1:1e:fe:ee:e1:c3:cd:c5:2e:7c:2e:e0:78:66:e0:69:
5e:2e:f9:3e:74:a9:45:4d:ed:d4:ba:97:be:bd:6c:b1:df:6d:
cf:70:dc:86:71:a3:b8:80:c9:0f:e7:1e:38:ba:45:be:f7:29:
ce:a1:36:dd:91:c2:cd:0e:a6:64:cd:68:b4:5a:7e:bb:eb:6c:
54:9f:2d:48:55:00:4f:64:36:9e:f9:09:71:52:96:5d:23:d3:
2d:d6:11:58:34:82:e6:16:72:e6:0b:6a:be:77:f7:25:9a:0e:
7a:f5:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:23 2025 by rpki-client