Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: 8mcxNYcTU6W81xZmz3Byr9RNC/l6LtFHOE8T8cNF0nQ=
Subject key identifier: 5F:23:F7:DD:CC:F2:F4:EA:65:CF:0A:6F:00:61:5C:53:FB:EB:B6:6D
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 0198D5836E86DB2D9FF1D1D22AF3DBEED8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 01B9
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: 73dAPbHNxplu1dMjvGt5xPlGAVmIGC9tSft13+4OpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6e:86:db:2d:9f:f1:d1:d2:2a:f3:db:ee:d8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=5f23f7ddccf2f4ea65cf0a6f00615c53fbebb66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:d2:a3:e1:5f:71:25:58:34:51:48:3d:cc:
f4:94:32:be:9a:e9:f1:37:38:f4:e3:25:48:1c:5d:
4b:f7:f8:cf:5e:42:88:c2:16:9f:d7:b5:ed:d0:62:
50:c0:19:80:74:21:c9:4a:cc:e4:34:57:7b:90:f4:
e7:e3:b7:45:b9:36:ea:59:83:e5:26:a8:17:dd:83:
94:cc:62:88:66:a0:88:cb:d8:97:74:da:d6:cf:43:
cf:eb:83:cb:fe:e0:f9:2c:db:14:52:ca:9a:09:5a:
14:f7:5f:8a:27:ea:d7:14:95:8d:7b:ba:ca:87:b0:
9a:b6:14:e1:ac:cc:f3:62:90:97:b0:a3:c1:c4:c0:
e3:f7:b6:2b:a0:a4:78:72:a3:d5:1f:dc:22:13:af:
04:4e:e3:25:4f:d1:6c:23:79:f3:da:00:6d:3e:68:
1b:05:7b:86:32:df:45:ab:b6:f8:c6:8b:a9:a5:90:
d3:fb:55:c8:22:04:b6:45:53:49:a6:d4:a2:0b:0f:
01:56:8f:9e:20:80:b8:83:31:18:36:95:2a:ed:09:
0e:7c:bc:4c:46:a3:86:fb:da:50:3c:14:57:86:0e:
39:4e:7e:c3:a5:dd:2a:f9:f4:50:e7:c2:51:ca:5d:
40:e6:b8:46:ab:52:98:5d:19:22:58:12:8e:e4:6a:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:F7:DD:CC:F2:F4:EA:65:CF:0A:6F:00:61:5C:53:FB:EB:B6:6D
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:61:f1:e2:e0:8f:b4:98:11:7e:62:2e:74:96:cf:97:73:
2a:da:bb:fd:49:36:25:2f:4b:5a:bd:77:23:58:45:8d:5d:66:
43:7b:78:6c:2d:86:a7:0a:88:6f:45:05:e1:87:85:7b:2a:c6:
0f:ad:cb:55:4e:fa:37:65:94:b5:38:0a:9d:9f:3c:c2:5b:21:
62:2f:e4:e7:81:47:11:0d:28:95:47:37:91:7a:d8:3f:13:1d:
ee:21:90:e1:be:98:6e:ca:b9:3a:c0:0c:b6:c1:81:05:17:ae:
98:98:76:04:b6:4c:b1:68:39:9f:8a:76:59:6c:7c:02:c4:7d:
af:92:ba:45:21:de:50:d8:16:90:3b:c6:0f:60:3d:df:cd:39:
14:fe:17:16:30:e0:8e:4b:1e:5c:69:3d:7f:f6:e8:12:db:4d:
10:06:e2:ec:33:c6:f1:82:64:77:a8:bb:4c:9e:49:d9:fa:c1:
2d:d8:50:18:0b:5a:e7:ca:26:8d:b5:68:ea:d9:0c:13:dd:61:
ba:91:fc:e7:ea:c2:8a:50:b7:06:03:96:b6:b0:1c:1c:f0:c1:
cc:0c:17:51:1d:b6:83:b1:98:dc:57:4b:56:0d:6f:41:45:30:
93:06:f0:41:1d:17:93:e6:56:39:c8:49:58:56:da:43:17:e1:
41:51:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:28 2025 by rpki-client