Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: o81fXYdDqh7KkCC0sis/wuzdnYnKIJWxSSXTXBwRCEE=
Subject key identifier: 04:6C:57:54:11:6D:58:EA:45:2E:B5:1C:3E:4C:F6:CC:9E:6D:B4:E9
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 0198D4047DA51434117AFD0DC54E895AB407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: XYfFZ/d9KUaUgcw2sarIkm66ukIhM+E9X4xBWGHa5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7d:a5:14:34:11:7a:fd:0d:c5:4e:89:5a:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=046c5754116d58ea452eb51c3e4cf6cc9e6db4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:87:96:04:1e:cd:12:46:a1:0c:a4:1b:fb:
92:7f:26:3d:7f:d6:e0:e7:7c:c3:0e:18:90:6d:b8:
fa:6c:ac:f2:f9:79:59:ec:57:28:f9:e1:3f:6c:f8:
24:ca:70:9e:9b:2b:81:7d:f5:8e:81:f1:08:79:ec:
af:d5:dd:36:c7:1b:a5:27:81:44:10:e0:8a:a0:7d:
e7:91:c6:6e:a7:ce:bd:b4:c0:59:c6:79:80:95:ed:
1b:4e:52:d7:7f:b2:be:1c:ff:f4:0f:c0:ba:cd:90:
c6:bc:72:1d:e6:1d:b2:50:ce:c7:60:33:b4:22:4f:
33:b3:d4:89:ab:4a:5b:3b:60:69:22:a3:ef:c8:5f:
4b:fb:78:62:a2:53:8b:d5:88:84:ce:c0:a2:01:fc:
46:ad:84:c4:c6:3c:66:4d:1d:95:0f:5d:5b:12:b7:
0a:d9:6c:52:c1:8c:bc:75:5f:cd:15:28:39:c5:39:
c1:b3:9d:be:95:90:06:a6:21:46:d3:68:8f:6e:84:
37:b2:51:0d:71:e7:df:59:9b:56:6e:be:db:bb:3a:
d7:37:0f:b0:0e:fb:83:fb:bd:01:ab:ed:c1:3f:3b:
49:a9:fb:bd:53:21:ab:2d:65:e7:60:5b:57:18:18:
16:b8:5b:3f:43:2c:b9:11:d6:b0:a0:d6:66:46:f8:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:57:54:11:6D:58:EA:45:2E:B5:1C:3E:4C:F6:CC:9E:6D:B4:E9
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:56:57:03:08:ea:5e:6c:cd:1f:bb:e6:96:12:0f:98:ef:11:
a4:4c:07:09:d5:9c:2e:72:ba:f6:4b:28:2c:33:ef:e0:a9:4a:
f4:f6:4b:be:45:30:cd:cc:af:44:59:e7:18:f3:c9:d9:91:7b:
3e:d1:f4:f9:cc:7b:d5:f0:98:af:36:a6:bd:de:b5:ce:a3:98:
a6:3a:8f:30:61:45:b2:c4:70:fd:f4:1e:d1:50:a7:67:05:c7:
06:88:bb:03:e1:fb:fa:f0:44:94:11:21:e5:50:32:45:76:0a:
e5:35:94:77:c5:f3:a2:68:27:2d:5d:fd:50:66:b3:f1:01:88:
b6:ef:77:56:5d:75:9d:90:49:f9:09:2f:dd:59:f1:1e:c4:f8:
5b:76:b2:6e:1e:ca:1a:4e:9c:c4:52:49:c7:fc:d3:05:ef:1f:
f4:cd:b6:e7:65:ca:a7:90:3c:64:00:25:09:29:d2:9b:30:46:
ce:ba:81:0c:80:bb:54:89:73:eb:22:0c:0c:6f:22:80:18:5c:
31:fd:2a:c7:4f:18:c0:c4:81:5f:8a:09:e5:d7:f0:7d:da:17:
c6:4f:55:25:76:3e:c5:53:09:0d:3b:c3:2f:9b:4d:65:ab:ea:
2e:4f:c1:d5:e2:c4:46:e6:1e:a9:b6:81:5a:36:1f:18:44:85:
37:5a:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client