Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: cbHO6gn9fJ8nZti1c30I/n+dcynI+gU2ZY4Z5WHmUH0=
Subject key identifier: B9:A3:D8:4A:8C:AA:A4:D5:81:DD:23:A6:DD:7E:4B:A5:7F:76:DB:BC
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 0198D47298BF98D44C36477923B8A600E788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:16 +0000
Manifest this update: Sat 23 Aug 2025 01:02:16 +0000
Manifest next update: Sun 24 Aug 2025 01:02:16 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: XwPPjl9D7U2lpEBEx2iyi8JERRxwK+1rzbk7pEVuNpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:98:bf:98:d4:4c:36:47:79:23:b8:a6:00:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Aug 23 01:02:16 2025 GMT
Not After : Aug 24 01:02:16 2025 GMT
Subject: CN=b9a3d84a8caaa4d581dd23a6dd7e4ba57f76dbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:27:cb:a2:dc:9f:17:cb:35:a9:5d:7a:c7:
09:b0:dc:66:49:e2:78:7a:ac:f2:8f:5d:bb:3e:7a:
41:45:8d:90:32:19:35:b6:ce:a2:ad:05:32:56:93:
67:54:ae:a2:29:4a:2b:fe:f8:4f:14:8c:fe:a0:64:
f3:2c:b4:cd:23:0a:e4:4b:4e:31:75:15:f9:75:38:
91:67:c7:ac:64:30:10:d3:a0:a2:dc:55:62:46:da:
51:df:b2:d8:f7:03:3e:15:32:dc:a1:70:cf:3e:2b:
f9:37:49:53:25:ab:2d:6e:bc:28:06:8c:67:d9:29:
4e:a6:9c:a5:c6:4b:c0:f2:b6:32:72:df:dd:97:73:
52:84:fd:ec:de:e2:13:c9:96:8f:a4:5a:a0:31:f5:
59:d6:75:45:7b:dd:9c:2f:52:bc:97:3f:87:7a:f6:
8d:f6:a2:ec:03:db:f8:ba:26:74:0c:34:ae:60:b8:
87:72:f4:24:13:64:c9:bd:f2:51:33:08:ba:0d:74:
27:50:4b:11:97:6e:ad:54:31:f5:27:af:30:68:82:
bd:72:98:e4:b5:fa:18:3c:35:59:d9:c3:c4:e6:d3:
24:df:c3:f0:59:a4:0c:e9:44:ea:f2:e0:47:b2:f5:
d9:00:cc:c4:19:91:73:3b:ec:45:9d:e8:fd:e1:f4:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:D8:4A:8C:AA:A4:D5:81:DD:23:A6:DD:7E:4B:A5:7F:76:DB:BC
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5a:66:56:ce:2f:c2:7c:3f:05:38:2b:9e:14:1a:99:7f:f4:
c6:69:aa:09:ce:f9:8b:e5:24:ac:4c:3f:6b:29:16:b6:a8:e7:
1f:30:bc:ac:69:71:d4:76:a5:8c:00:bf:0c:af:bc:50:c3:8d:
fc:2e:48:63:83:79:be:c7:21:c7:08:8e:21:6e:86:38:13:63:
d7:0a:b6:b1:12:ff:6f:90:7f:30:2d:42:84:48:c3:39:7d:bd:
00:2a:f2:7d:f3:53:1b:b5:39:0c:56:72:27:c4:41:8b:4b:e9:
1f:71:f5:6a:d5:40:38:af:1b:c3:76:57:0d:3f:ab:d1:fa:a5:
69:bf:4f:4c:a9:80:9d:71:a4:46:7a:6a:b5:31:9b:a8:8e:eb:
36:14:90:47:93:d5:49:fb:70:02:60:e9:e8:51:c8:2a:98:5c:
7b:fd:5f:4b:90:3a:77:cd:f8:c4:60:90:84:a3:54:46:c2:f4:
60:b3:47:a3:16:dd:02:d8:24:b0:80:8b:36:d0:6d:94:fd:fe:
5a:8c:bf:26:99:00:a3:20:26:a7:98:93:28:c7:27:76:7f:cb:
c4:04:2c:ad:61:5e:25:c8:0e:42:6e:22:86:c2:67:eb:6d:bb:
2f:3f:d5:72:24:3b:41:e4:2c:88:b3:9d:49:dd:7d:67:ad:35:
c8:ed:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:57 2025 by rpki-client