Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: ieh4oJ6FHaeDoyDB9zkeA/Wcfpu2GV64ATnYYQDgAew=
Subject key identifier: 08:3E:1B:9D:5C:5C:DD:38:04:E1:EE:23:58:57:18:BD:19:F4:A5:24
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 0198D5F1A1CF7103E054087265D65889A01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 109B
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: a8pwNR6V9v0OV7gEuXgI1TV/kjIQF0m4YWcz82M7ICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a1:cf:71:03:e0:54:08:72:65:d6:58:89:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=083e1b9d5c5cdd3804e1ee23585718bd19f4a524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:e6:cf:79:9b:2a:91:2a:b0:0c:ae:40:fe:
84:12:2c:ed:44:cc:73:c3:3b:63:98:5c:7e:14:6d:
87:64:d2:cf:48:a7:44:07:e6:04:75:46:c9:4b:01:
59:01:f4:7e:fa:73:73:33:9b:38:ed:8d:05:f7:95:
33:55:63:99:38:99:d7:18:b9:82:e8:00:ba:80:4c:
30:b0:b9:d9:ba:06:97:76:15:df:63:be:97:d0:df:
ef:8f:88:c5:1f:e7:af:6d:29:f5:8f:28:cf:5b:42:
46:76:44:c7:9b:03:2d:fd:c5:50:a0:81:af:d4:9d:
2c:fd:0e:1d:78:e6:69:b6:98:6f:68:ab:10:e3:69:
57:2b:6a:3a:6f:6b:2a:14:c9:24:1b:cb:f8:bf:b2:
28:5b:62:a3:21:36:ba:31:fa:ef:d8:9d:ed:ba:6d:
d8:cb:85:ef:00:23:08:e5:98:1d:45:1f:14:d4:76:
a0:14:9a:0b:a8:2b:5b:62:c5:1e:2f:8f:66:dc:33:
dd:77:cf:aa:24:d8:13:bd:05:5b:10:f9:4f:65:32:
54:31:e3:c9:40:30:7f:95:6c:f9:48:09:c4:57:08:
68:27:11:cc:47:95:47:a9:df:5b:0a:75:c1:7a:fd:
7b:66:1d:e3:23:56:ac:83:d3:b5:8e:b6:46:80:05:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:1B:9D:5C:5C:DD:38:04:E1:EE:23:58:57:18:BD:19:F4:A5:24
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:78:f1:59:ac:5a:8f:8e:07:38:b4:ec:52:e3:a9:36:8d:
ba:65:15:86:87:6e:78:bf:8a:b9:4c:69:99:ce:0b:7f:2f:6d:
4f:6b:9d:1c:31:5e:17:f4:b6:dd:73:1c:84:ea:e8:28:5c:cc:
43:39:33:fc:0a:84:00:be:2f:0d:80:9a:1d:d7:2e:e2:e1:2b:
47:f4:fb:89:d8:ff:08:95:b7:4d:bb:d4:17:76:f5:57:74:65:
73:06:9d:14:fd:23:0d:b9:c0:1e:57:63:5b:a5:f5:7f:5b:33:
4c:08:b1:b5:27:41:d6:33:3b:c8:0e:f8:8f:d2:19:44:a6:c0:
60:a2:75:b5:f8:e8:5f:da:a6:02:43:b3:c7:68:3f:29:36:6c:
9e:0f:3f:91:c1:9b:d6:71:af:33:5c:eb:07:e4:de:ae:4d:b4:
9e:fd:6c:db:e0:bb:20:90:06:e1:35:81:f3:af:27:25:da:69:
10:7f:af:d1:27:66:78:61:56:97:85:8d:38:56:7d:35:92:16:
b9:e6:d0:12:16:62:0f:4a:9b:0d:4b:d8:3a:de:00:bf:b5:a4:
bd:6b:63:53:e1:55:73:6c:c0:55:df:84:20:d5:ca:cd:5c:ee:
99:11:7c:1b:8d:1c:5b:64:37:d8:85:19:97:4b:f2:07:79:75:
e0:18:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:34 2025 by rpki-client