Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: sEiS4W11+9lgJmbQsYFeD2a8vdaVA8vmh7BdIffb3XU=
Subject key identifier: 14:20:69:0B:60:A2:9E:8F:69:84:04:4B:53:4E:82:03:EA:31:3B:3F
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 0198D583FF50A1B47B9B63C759DF532713D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 085C
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: E/c0X49AcO0Opa1iZsFY/u51TwZPSlGuLgOP0nqfFB4=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ff:50:a1:b4:7b:9b:63:c7:59:df:53:27:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=1420690b60a29e8f6984044b534e8203ea313b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:e3:cf:ae:64:e5:dc:96:b2:1c:d0:5b:3c:
6c:d2:73:44:66:c8:e2:05:f9:da:71:56:49:2b:d3:
34:9b:68:14:74:e6:84:3b:51:bf:94:45:04:cd:b8:
f5:1d:c3:42:33:09:be:35:28:34:e5:e7:e4:a8:02:
95:b0:35:e9:ee:3f:12:96:12:65:94:a5:a0:54:c2:
3f:e8:c3:6b:b7:37:5b:32:8f:38:56:52:5d:7e:17:
a8:3d:48:96:4d:92:7f:2d:21:ed:f3:e3:e3:da:8b:
cb:3d:9b:57:80:2d:89:da:57:29:7d:b0:5b:1f:19:
f3:cd:95:f9:84:0f:b1:13:bd:28:33:b3:26:f6:1d:
5b:22:0d:24:40:86:10:85:e1:44:b1:87:0f:0d:05:
97:22:48:21:b5:8e:f1:68:a4:5e:a3:5d:a8:d7:82:
4f:83:bc:df:52:95:e5:91:d8:f7:39:2d:a0:ff:b6:
06:d2:fb:8e:f7:bc:20:43:49:54:1b:1e:4e:fe:30:
2f:57:d4:45:76:c6:0a:dd:b7:dc:49:e0:2f:fa:d5:
97:69:bc:37:3a:7e:4f:ef:d5:44:26:74:ae:f1:68:
7c:2b:7b:8f:02:5d:6b:ea:10:25:58:ca:78:c2:de:
dc:39:7c:3f:4b:4c:b1:e6:f5:8e:a0:b4:49:89:4e:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:69:0B:60:A2:9E:8F:69:84:04:4B:53:4E:82:03:EA:31:3B:3F
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:a0:f2:a9:f2:2e:af:19:37:8a:d5:ad:22:ea:e4:ac:8d:
a3:16:79:7a:48:c5:9f:5c:94:52:74:c1:45:24:a3:1d:27:f7:
55:86:14:dc:93:9e:10:6f:b9:1b:1a:2d:37:75:7e:b9:21:16:
c5:6f:3d:7c:8c:7c:53:d5:4a:62:f6:07:cb:41:bc:90:e5:df:
cb:f1:f3:54:70:28:8b:50:69:cd:c8:fa:85:ce:fc:76:71:c6:
67:78:d6:d8:d9:5c:ae:c4:6a:05:e7:aa:3f:78:29:bc:09:86:
c6:d8:0c:e7:4c:cf:02:9f:43:17:fc:8a:fb:59:5a:be:8d:14:
39:41:bf:cc:14:61:82:c5:55:21:f0:ad:56:06:60:f4:41:b4:
ad:fe:47:31:be:59:47:87:34:90:1a:8c:a6:ba:28:77:d9:23:
5e:a5:81:4e:6e:fc:df:f1:5c:0f:71:ee:2e:27:99:73:b0:16:
7d:5a:58:81:20:80:ef:99:1d:aa:79:19:f8:b1:81:57:35:5f:
88:2b:2a:9b:0e:91:c6:f9:ba:fe:c9:fd:8e:1b:af:0f:b4:f6:
84:8c:95:16:7d:5a:d0:43:25:48:2d:3d:36:e5:58:50:18:d7:
ac:31:98:d6:a3:f0:e1:b8:a4:ea:5d:b3:07:60:40:be:9f:f4:
bc:04:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:38 2025 by rpki-client