
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: SPUN+ZOiJEQHp+BvogYZApkj/86puLEARGzYK/RYCvA=
Subject key identifier: 1B:EE:2D:02:86:41:F6:B9:63:C5:86:A5:62:E1:2F:95:2A:88:5F:F0
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 0198D40463A17D2842D07CF9293CEF72E690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0C1E
Signing time: Fri 22 Aug 2025 23:01:53 +0000
Manifest this update: Fri 22 Aug 2025 23:01:53 +0000
Manifest next update: Sat 23 Aug 2025 23:01:53 +0000
Files and hashes: 1: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=)
3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: wOxMT7kRe0X4K8PRdv1IexM1k0D8djFVBBQ/ZT6zKnk=)
4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
5: atNz0WdRnHANtOvahe4tYSXD9RA.roa (hash: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=)
6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:63:a1:7d:28:42:d0:7c:f9:29:3c:ef:72:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Aug 22 23:01:53 2025 GMT
Not After : Aug 23 23:01:53 2025 GMT
Subject: CN=1bee2d028641f6b963c586a562e12f952a885ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:9a:34:2c:bc:c9:9a:9d:9f:79:a2:ce:46:
4e:91:46:b2:b3:c2:5d:7b:31:65:c2:74:a6:f0:8e:
25:0a:50:97:d1:03:27:89:c1:57:b0:30:60:0a:05:
78:db:2e:04:3d:92:83:5b:59:e1:8a:f2:55:4b:90:
e0:ef:ee:c5:03:f8:ca:26:21:fe:ca:20:4e:d3:bc:
0a:b5:42:43:dd:89:e1:c4:84:50:3e:14:d7:0b:e1:
52:e1:6e:6d:a9:44:e1:3d:11:e5:3a:7e:ac:2a:25:
98:86:46:e3:4a:2a:71:3d:5d:79:83:a8:48:6b:c6:
07:5c:f8:7e:01:ce:43:6c:77:01:8d:14:09:e6:02:
fc:7f:83:d6:d7:e2:86:f0:f0:47:96:41:30:45:4b:
db:a6:12:f2:b0:17:cc:69:f9:57:57:78:f0:9c:eb:
6e:bb:dc:00:27:5d:a8:2b:42:d3:7b:43:b1:6c:2f:
19:3f:f4:ec:5b:55:03:0b:ca:d0:26:ad:ed:c2:f5:
32:14:2b:92:1d:26:2c:73:75:42:ad:30:4d:93:4f:
dd:20:bd:b7:52:98:8e:d1:fe:7f:1f:ad:ab:c8:1b:
8b:e3:9b:c8:b4:50:44:7c:b3:d9:49:36:f8:ae:4b:
79:1e:7f:56:7d:9d:be:0d:66:68:44:27:fe:e7:03:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:2D:02:86:41:F6:B9:63:C5:86:A5:62:E1:2F:95:2A:88:5F:F0
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:3d:bb:ae:34:86:a9:78:17:b5:03:dd:b8:1f:0a:ad:2d:
2e:59:65:ac:a6:fa:30:73:ff:41:ce:a0:d1:23:b3:cd:f1:9f:
e2:5e:0d:a9:2b:80:90:06:8f:5e:53:50:61:bf:36:be:7f:85:
13:58:99:a9:89:21:bd:1b:58:5e:10:c2:7f:d9:e9:d7:ae:3f:
a9:25:63:10:e4:5e:d6:db:af:bb:39:ee:02:29:6c:68:02:60:
44:16:e7:86:ec:30:e1:0c:ce:1d:f8:0c:f5:17:34:3d:85:5f:
3a:64:c3:95:f1:18:48:64:52:cf:05:d5:a4:e2:47:e2:a7:c8:
58:d3:8d:27:bf:12:5a:8e:d7:5a:b6:80:35:81:49:ae:b1:56:
2b:8e:80:bb:a0:1e:a9:e9:9b:bd:e2:8f:95:d8:7d:4c:fa:1e:
4e:f5:16:e0:28:f5:33:14:ec:61:18:f0:18:43:a6:3a:d3:4e:
98:75:d4:f1:de:14:c1:94:84:e2:1a:d2:bf:21:2f:8e:9a:65:
8c:1b:01:09:e2:b5:a2:80:68:00:c0:25:4f:f4:c0:9c:a2:af:
65:1a:32:f6:5b:58:dd:e4:fb:84:03:8f:6f:19:e9:75:2d:96:
32:23:99:04:79:18:5e:58:0b:a6:f6:40:f2:0c:d7:14:a1:ce:
da:6a:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:53 2025 by rpki-client