Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: tc4pFqsVaJIPbr9F2wxscLAVgNENrb61ODKP/pl+sdE=
Subject key identifier: EC:16:04:CE:16:74:C4:90:F7:78:F3:BD:CE:CD:F2:8D:C5:CC:7C:9A
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 0198D6CD9111FE6631F99ACEF863221EE9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 0253
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: KrTx+PJK6mS8FWfew+8SLDXIu2ETiuqDnhSWE3eTtYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:91:11:fe:66:31:f9:9a:ce:f8:63:22:1e:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=ec1604ce1674c490f778f3bdcecdf28dc5cc7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:b7:cf:dc:22:8b:3e:e2:62:32:16:5a:f7:
21:0b:2c:31:81:c7:2d:b4:4f:3e:cb:3f:12:51:41:
2f:52:d0:d1:20:19:9d:b9:ce:86:ba:a3:5f:a4:2a:
f5:95:da:b7:aa:27:de:8a:6e:74:cc:72:62:89:8b:
7a:f4:a6:25:a8:aa:9f:0b:0a:e1:46:c8:99:6f:7c:
ce:79:ca:42:e6:22:c5:9c:9a:f2:04:9e:3d:bf:e9:
13:40:5f:b9:ae:cd:d8:80:61:ea:ef:60:47:2f:6a:
df:7c:32:bc:6e:51:37:85:40:b7:a2:d1:5d:17:c8:
30:43:01:8f:ce:1f:ed:55:5c:4e:ab:84:51:b0:fe:
df:2c:4d:49:f3:db:b1:d3:68:4c:13:70:72:8d:41:
79:9c:fb:ba:23:a9:b2:9b:77:c0:fc:af:c4:3d:20:
94:65:64:06:52:53:a7:5d:b7:ad:80:4a:9d:16:e1:
3a:23:fe:4a:9b:7a:96:b7:51:ea:ad:7e:58:0c:88:
a7:82:b4:97:24:29:fe:57:55:e4:f8:96:b5:9e:fb:
98:df:90:e2:f5:98:ed:ff:44:12:6f:4c:cf:b1:4b:
4c:f0:7f:cb:37:49:03:53:a6:93:b4:b4:af:0e:ac:
74:7f:11:1c:84:5a:84:68:b5:fb:7d:3e:49:65:86:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:04:CE:16:74:C4:90:F7:78:F3:BD:CE:CD:F2:8D:C5:CC:7C:9A
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:de:d5:8d:4e:87:6f:a0:c6:a9:c4:35:8a:58:e5:e8:84:eb:
aa:bf:cd:f5:27:54:af:d2:6b:35:3c:df:19:89:f3:4d:50:ef:
f6:56:69:c2:1a:6e:e3:13:68:06:01:0f:6b:f6:05:7a:44:71:
f6:12:bb:30:c3:de:39:06:96:de:0e:ab:2f:e2:7c:30:61:a0:
ea:e6:35:8a:08:62:45:1e:b4:8a:2f:c4:2a:d5:4e:1f:07:84:
c8:85:78:ce:b3:d1:1a:09:26:11:0f:b0:f9:52:06:1a:4b:9d:
76:9a:5b:c3:36:47:64:97:2a:22:2c:de:31:cd:63:4b:00:6e:
95:b8:bd:ea:de:d9:04:b9:e0:f8:19:e0:5f:9a:cc:f2:30:77:
e1:ad:5d:89:63:8f:c7:03:e7:79:be:38:09:83:25:8e:d2:39:
12:8b:f8:6b:88:38:93:27:b0:15:5b:a3:7e:d3:de:b2:e4:16:
ce:d4:0a:6b:7c:95:f6:e6:09:ae:8a:28:47:dc:29:9e:f4:db:
70:72:cb:18:77:ba:87:58:d4:78:69:4f:e9:d0:f0:77:ac:a1:
9f:3a:4c:06:6c:76:37:57:40:ba:dc:01:12:4c:ec:12:e0:e4:
42:af:96:a3:c4:3d:42:51:8e:68:61:45:71:89:46:f6:b1:2d:
9a:19:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:28 2025 by rpki-client