Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: CrRM6BdGm1cdkxvltM1rqUhLNkAjCIZOJx3dcxzKs1o=
Subject key identifier: 11:38:C0:C9:7B:17:F0:DC:DB:C7:59:7E:50:F7:AA:22:0B:53:B4:00
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0198D5F173110DB544C17A85C89952063752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 081D
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: NnVsSg+ujK3q42wIb1D3Fz8zRRJRWqBAIvnWFeuLVeo=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:73:11:0d:b5:44:c1:7a:85:c8:99:52:06:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=1138c0c97b17f0dcdbc7597e50f7aa220b53b400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:b9:92:2e:e4:2f:39:94:5f:36:fe:80:97:
14:30:de:8a:e1:2b:a1:3c:5b:e0:c5:80:f6:e9:74:
63:fa:66:89:e2:df:50:d5:1e:f8:3d:e3:2a:7c:73:
72:ca:79:9c:ff:7f:ea:aa:10:63:7e:e4:e0:3b:cc:
f8:4b:b5:40:ee:dc:49:cd:d4:64:09:af:8d:39:36:
c1:0e:06:0d:69:1e:8f:5f:4f:72:c8:c4:94:7c:f7:
21:ba:d0:4c:2f:f8:84:b2:f6:fd:57:97:84:1d:4d:
b3:19:6f:e9:82:a6:a8:ee:b7:c9:09:43:e1:37:14:
c5:ef:fd:ee:74:02:c3:02:84:2c:73:85:4a:53:d0:
5b:d8:f3:c8:09:af:d6:ff:08:38:6a:e8:62:ba:66:
74:9c:43:90:33:40:ab:c1:aa:bf:46:13:de:07:8d:
60:1f:bb:12:b5:f8:82:41:2a:a2:ff:0d:5b:b2:4f:
36:cf:3e:8e:0f:9c:28:57:21:2e:12:b4:21:ac:01:
bb:9b:4a:50:32:d4:6b:77:61:7a:23:02:87:49:c9:
a5:53:02:bd:e5:ee:b3:fe:65:f7:46:f4:96:40:ec:
14:63:f6:87:5c:fb:a3:d2:16:69:2f:16:f7:28:59:
bb:86:02:06:f4:d0:18:87:f5:a9:33:8e:e5:64:c0:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:C0:C9:7B:17:F0:DC:DB:C7:59:7E:50:F7:AA:22:0B:53:B4:00
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:34:9d:95:93:d6:b5:71:53:8a:30:61:43:67:fd:5f:ac:
ed:40:bb:21:8e:da:43:b9:29:28:f6:80:bf:70:22:63:0a:ac:
4d:7e:8c:50:42:f9:59:e6:67:d4:5f:07:77:2a:22:6f:5c:72:
b7:da:b4:07:34:24:ee:02:ca:9d:65:da:74:f4:35:17:a4:ce:
85:36:9a:0c:b8:90:8d:21:fe:93:24:34:56:c9:8f:6d:52:d7:
a1:13:f7:9d:93:c2:70:99:8d:15:c9:5c:32:60:27:15:50:28:
52:25:90:51:10:3f:53:10:9d:cb:ad:10:e5:19:9c:de:c1:1d:
f7:2c:c4:da:9b:a5:c8:ee:fd:a9:33:8a:9f:0a:03:0f:9e:a8:
b6:ef:bb:e3:05:5d:f2:28:da:ba:d8:82:2b:e4:3c:05:5e:2a:
47:44:00:52:61:22:a9:d7:32:15:99:34:49:11:81:7b:6e:11:
d9:4a:d0:30:b8:da:f8:2f:19:b4:5e:d8:30:d5:0c:7c:20:95:
27:75:a1:21:c2:94:9e:7e:bf:bd:78:b6:3a:b4:6c:53:d6:13:
5c:8a:b9:bb:48:30:1a:a7:de:cb:3b:34:09:4e:da:b0:67:8e:
f1:17:b6:81:31:ee:1d:e9:17:4b:fb:7e:9e:45:65:73:a0:a0:
d0:d8:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:32 2025 by rpki-client