Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: Pe8uKyXtBS+qC9Hy+2d4eQ0TL1wKPYbyw0jXm5qdfjw=
Subject key identifier: C8:52:4E:86:C7:2E:0C:4A:50:7E:2C:5E:E1:B1:CF:9D:62:DB:07:4A
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 0198D54E041B425AB4360F7F8F8FB21881EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 081C
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: kayRIJIqa8ZxwYnk+zEjS+VcOMbIC11+r8eSbjaAUFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:04:1b:42:5a:b4:36:0f:7f:8f:8f:b2:18:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=c8524e86c72e0c4a507e2c5ee1b1cf9d62db074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:8f:6f:1e:99:55:cb:80:46:1d:b5:a0:f9:
a4:6c:a0:82:4e:95:a3:c9:87:0e:ec:66:40:3a:96:
81:94:d3:6a:dc:3c:94:b0:eb:61:27:58:cc:35:9e:
64:27:ab:43:0b:59:36:82:13:81:ae:19:43:fe:6b:
ac:97:0b:5c:9e:33:30:72:90:52:ee:61:2d:fc:97:
46:e2:be:a9:3d:7c:86:69:4b:f3:27:d6:04:77:09:
50:e5:0e:04:a5:63:29:d0:a4:60:42:17:f3:7a:91:
6c:24:e7:8b:41:c5:df:4e:7e:d0:1f:55:73:03:cd:
78:d0:2f:7f:ed:50:78:66:cb:bf:e4:51:4a:5a:5b:
64:0d:cd:6c:e5:c2:55:65:08:6c:6c:be:99:37:89:
f3:b6:88:df:03:17:3c:6f:18:85:a8:74:1e:c4:5b:
67:0d:62:37:40:ea:25:bc:d9:d7:ff:22:e2:ec:9c:
d2:46:af:6a:4c:5f:e6:ae:1c:9b:7e:55:b5:ec:41:
51:d7:c2:19:86:ae:75:d6:37:20:fa:f4:ac:2d:8e:
cb:a0:84:5e:56:0c:cf:5c:11:62:5f:2e:f6:dd:49:
88:df:d4:cf:7e:86:7b:36:92:93:fc:f9:24:5b:88:
4b:1f:fd:49:f3:b3:05:cd:5e:d4:d1:39:58:eb:a1:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:4E:86:C7:2E:0C:4A:50:7E:2C:5E:E1:B1:CF:9D:62:DB:07:4A
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:32:dd:d2:2e:90:bf:9a:0a:67:22:29:20:25:24:e2:c2:1f:
47:bc:55:56:11:24:34:d8:b8:3a:d9:95:07:00:6e:2f:fc:ca:
a1:63:ac:8d:70:5a:3a:07:6b:ab:e0:ca:fa:0e:6f:1d:ec:13:
ed:0b:9b:53:8f:f4:14:5f:1c:b9:46:44:cd:b4:bc:17:03:25:
84:e6:b7:85:0c:11:0f:70:4c:43:49:33:6f:4a:35:37:c2:9d:
1d:26:bb:e6:d5:44:90:01:ce:66:f3:2a:7c:fe:cf:ce:db:92:
f3:84:29:ff:06:4e:7f:cc:cb:74:c5:d6:e9:d9:64:a8:44:69:
c3:2a:13:d7:73:b9:6e:74:32:fc:16:61:58:1f:af:5b:4c:21:
0f:e7:9c:7f:aa:f5:a5:e7:ac:28:a2:07:5f:f2:75:6e:1a:3d:
17:05:c7:2f:e9:ba:68:b9:ec:bb:f3:0a:3a:9d:1a:93:fe:37:
68:64:ed:fe:d9:d1:1e:2d:74:82:13:a7:a8:f2:39:9c:f2:20:
c5:5d:66:03:86:c0:fc:34:12:c8:88:48:52:50:ee:3d:53:85:
1a:e8:68:70:4e:26:c1:cb:86:19:9c:99:ce:0e:cb:01:71:46:
16:75:9f:22:03:20:fd:39:e4:93:f6:bd:c6:92:b1:d2:db:db:
6c:37:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:13 2025 by rpki-client