
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: 69o8ZpgR8ot1pZ0wA/yTmeyd4g2axICD2hTj4Ks/H/U=
Subject key identifier: E2:32:49:87:B8:BA:BD:FB:41:E1:9E:5C:CF:96:39:E6:94:8D:45:ED
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 01988B7CF12FB2674A1170AA965955FF38C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 15A2
Signing time: Fri 08 Aug 2025 21:01:17 +0000
Manifest this update: Fri 08 Aug 2025 21:01:17 +0000
Manifest next update: Sat 09 Aug 2025 21:01:17 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: rxEbjKMu0wOvEJMvwDWFL2f3w0rn4BHPpELiZrgrfH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:f1:2f:b2:67:4a:11:70:aa:96:59:55:ff:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Aug 8 21:01:17 2025 GMT
Not After : Aug 9 21:01:17 2025 GMT
Subject: CN=e2324987b8babdfb41e19e5ccf9639e6948d45ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:4b:b7:92:bc:00:1b:f9:47:d7:dc:da:81:
68:16:28:60:1c:cc:64:64:45:1d:db:91:93:51:d2:
ad:84:b5:5c:38:14:a6:04:cc:37:e3:76:9a:f9:45:
eb:49:57:95:41:46:f3:ab:6d:21:e0:be:96:03:27:
95:0d:3f:29:c4:7b:f7:f6:28:32:ce:e7:f2:5a:b5:
28:cd:09:4d:d2:a3:dd:19:fa:5b:fa:af:a4:b7:33:
18:6d:fb:d0:81:c2:4b:9a:30:00:39:13:ee:01:54:
b7:92:07:cb:63:bf:6d:2b:28:67:dc:11:1c:8e:fb:
61:75:f7:6f:18:e4:45:ed:85:ce:74:89:85:21:90:
d5:97:dd:fb:50:39:56:e4:57:46:83:24:bb:67:76:
d3:d6:e3:df:ed:4c:5d:b3:d6:54:30:b7:8d:58:17:
a8:ff:2a:8c:9d:d6:c1:2c:db:9d:0e:15:72:80:f2:
42:ee:62:dd:ae:22:a3:90:00:09:46:93:53:94:e8:
8b:be:f2:ec:86:bd:5e:9b:0f:83:ee:9d:82:ea:90:
8e:29:d0:a2:98:af:49:04:43:ea:5c:39:81:0d:7f:
2c:6c:13:ca:45:b1:5d:91:ab:2a:24:c1:90:3b:72:
11:96:97:87:cb:d1:90:08:97:96:d3:4e:5b:92:ac:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:49:87:B8:BA:BD:FB:41:E1:9E:5C:CF:96:39:E6:94:8D:45:ED
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4e:f1:5c:8a:02:24:ca:d2:7b:cc:fb:16:de:01:1c:4f:c1:
06:70:6c:a6:aa:d9:25:cd:b9:d4:97:03:df:a7:80:00:07:5d:
a9:20:82:4f:43:e7:ef:21:50:97:06:f1:c3:98:29:97:61:29:
81:40:9a:8e:ee:66:37:0a:f9:f3:11:36:81:37:c7:b2:5c:0e:
ef:48:80:af:f4:93:66:96:0a:ca:24:de:6b:7a:17:87:02:15:
c9:99:25:69:23:74:88:41:0d:02:be:d9:47:22:4f:54:a2:4c:
d7:61:b5:ab:91:37:d3:4e:a4:7c:5a:c0:39:13:92:58:c4:0b:
65:e5:6f:1c:ae:04:e1:97:66:df:36:84:ea:fd:f4:46:93:a4:
7c:d5:0c:b3:ef:1f:92:60:55:1e:98:70:08:58:04:18:8b:5c:
ad:94:e7:de:f2:3c:30:4b:18:20:6b:79:cd:35:fd:bf:3e:b3:
b1:a7:f2:bf:4e:36:7f:95:29:1f:8f:95:17:60:95:5b:1f:9f:
61:bc:7e:97:70:ff:da:21:da:7b:8f:43:ec:cc:8b:18:ae:69:
ff:80:e6:93:d7:10:1c:24:36:3b:58:56:e3:31:6f:8c:c4:a5:
9b:5a:11:37:1b:4a:d9:a1:07:0b:2d:fd:43:7b:cc:e3:d9:47:
57:cf:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:15 2025 by rpki-client