Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: tdNqx19FZe7f1jCgQfZTdIuzdobuZujvBJ0MkBtJvno=
Subject key identifier: BE:7A:D9:65:1A:0E:74:7B:8A:68:37:21:48:C1:F0:7B:51:58:46:B1
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 0198D5BC45A5D1D716650285C0657F46FA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 120A
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: D28YFlO4mWQcskMqybSzVh46jl9Iw9awscqqE6kodqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:45:a5:d1:d7:16:65:02:85:c0:65:7f:46:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=be7ad9651a0e747b8a68372148c1f07b515846b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:57:08:70:be:d5:9f:64:f6:5a:64:6e:60:
8e:f8:bb:bf:57:19:66:fe:5e:bc:4f:8d:e5:02:05:
c7:00:bd:70:1a:54:71:4f:af:94:23:22:9e:f1:68:
51:6c:f7:3e:94:f6:dd:3c:63:a8:11:b1:2f:90:24:
31:78:f1:29:93:7e:55:d8:13:b9:64:b0:b0:66:60:
bc:a1:db:76:bf:f2:a9:60:49:f2:79:58:5a:4e:1e:
a7:ca:f9:47:45:5d:de:9c:db:da:c1:26:08:4c:88:
cb:d3:b9:bc:c5:fd:8d:b7:fc:da:a2:c8:76:11:ba:
d3:30:d3:93:be:f0:04:b1:2f:de:3e:d6:88:2c:6c:
b2:4e:30:cc:fc:3f:e3:d7:6f:4e:50:ee:21:6b:30:
e0:5b:34:2a:08:d5:b1:3c:58:74:60:41:5e:20:d2:
64:1b:9d:7a:d2:ee:fd:2d:49:a6:f4:31:4a:69:11:
d9:ef:57:93:ce:90:c9:8e:e4:44:f3:4d:41:62:ad:
a4:d3:35:5e:ee:82:8a:d9:79:2f:f6:cb:c5:63:2d:
bc:71:fd:8c:44:9b:fe:c9:bf:e0:fa:f3:75:8e:4c:
d7:fb:78:7f:cb:14:fa:73:5d:a7:44:cf:25:db:25:
78:fd:c5:db:6f:ff:94:f2:c7:54:17:be:c0:a9:48:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:D9:65:1A:0E:74:7B:8A:68:37:21:48:C1:F0:7B:51:58:46:B1
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:d5:88:79:72:19:b0:8a:5f:90:2a:99:c1:38:1d:d6:fd:
72:24:a5:79:ef:01:8d:76:a2:c0:5b:5d:1e:0a:c6:74:b3:7b:
79:ad:16:f0:fb:ae:06:96:93:56:a8:bf:42:08:33:71:0b:08:
e1:ea:e6:dc:c3:2d:8a:e2:77:e6:aa:d3:b2:78:53:36:c3:64:
ba:58:59:ab:c1:42:2e:6c:04:f7:8b:c4:1a:73:10:3a:a0:4d:
87:7e:14:34:4c:21:a0:29:52:98:f3:df:a1:56:06:8e:76:4a:
06:08:2b:9e:6b:3f:4b:11:97:fe:1f:58:03:a2:87:8e:e1:40:
93:93:ac:78:18:b0:5d:42:f7:29:33:3b:e5:e0:38:43:0f:ca:
90:c9:e2:50:cb:c6:80:9c:d2:e7:6f:6e:1a:66:73:43:f8:28:
e1:2a:fc:3d:63:0a:f0:bd:99:33:a9:ec:c5:0b:15:02:1a:17:
cb:05:f3:99:b6:b8:d6:47:3f:e3:77:62:59:93:84:5c:32:88:
cf:75:75:d0:a8:62:c1:c4:0f:d4:b3:3c:bd:ea:be:19:b5:3e:
4f:35:aa:4e:7f:91:4c:20:c4:ee:dd:38:6e:c7:17:3c:1b:1e:
df:3e:39:df:80:6d:b2:83:71:4b:ca:91:e0:28:41:f7:d3:4a:
40:ab:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:33 2025 by rpki-client