Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: FHdZXo1U2kKW0gNnQEGUpXb9/wnjxvB0FP15Tv6sRrI=
Subject key identifier: 22:07:F4:C1:39:E6:45:40:84:80:16:FA:F5:FA:55:F9:CB:17:F2:3D
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 01987D8AECA285C3C53A2AC71A96C169EF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0819
Signing time: Wed 06 Aug 2025 04:01:53 +0000
Manifest this update: Wed 06 Aug 2025 04:01:53 +0000
Manifest next update: Thu 07 Aug 2025 04:01:53 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: pYRgsSVxI3Hps1hqS2E55m1hhZdpOa/iM0dLtzjnBJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:ec:a2:85:c3:c5:3a:2a:c7:1a:96:c1:69:ef:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Aug 6 04:01:53 2025 GMT
Not After : Aug 7 04:01:53 2025 GMT
Subject: CN=2207f4c139e64540848016faf5fa55f9cb17f23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:2a:93:ab:19:2d:12:bf:6e:3d:b0:ce:d6:
77:83:df:be:1f:ba:4d:fe:27:1f:dc:0d:20:92:0b:
93:55:b0:e1:b4:38:89:5c:4c:86:4f:4d:30:03:ad:
b1:0d:c7:db:15:e9:a9:f8:45:7a:55:86:a3:aa:ab:
b5:1c:83:d1:67:b2:2f:13:61:4f:ce:14:e2:89:71:
91:2c:ff:83:68:f1:9a:9e:0e:6b:8d:00:94:01:18:
bc:08:64:06:92:24:79:96:fe:c5:66:5f:f3:f0:e1:
e2:81:26:a0:7c:dc:ed:ab:0d:68:54:df:b2:5a:ee:
93:97:cd:ae:d4:ba:dc:23:6c:7a:37:c8:b1:23:52:
89:1d:e2:f7:1a:a9:fe:e0:49:0e:53:7f:df:ed:31:
d5:47:98:e1:8b:a1:c2:03:0d:20:e3:ff:fd:e0:e3:
87:2c:28:05:63:86:9a:55:fe:fe:5e:82:2d:a0:93:
22:35:bf:b7:43:05:3e:26:fa:ab:d4:87:2c:1d:ae:
7e:91:df:c8:4b:45:e1:54:69:7c:2b:ef:30:9c:79:
79:7e:06:17:73:f1:32:54:67:f4:3f:87:30:a5:fa:
77:74:bb:fb:4c:a7:bf:93:6d:a4:0c:dc:e5:90:8a:
d2:d6:f5:77:1f:d0:bd:28:36:c3:75:26:a8:89:91:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:F4:C1:39:E6:45:40:84:80:16:FA:F5:FA:55:F9:CB:17:F2:3D
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e3:24:ef:cc:92:c8:7a:04:7b:ed:2e:dc:10:c5:dc:f5:c2:
d2:69:5c:e2:fd:83:1e:86:36:78:5e:ed:78:8f:0f:c6:dd:93:
45:e5:89:90:19:f8:46:72:45:1b:96:79:ff:c2:48:41:cc:de:
90:cf:cb:02:b4:bb:67:86:5b:f5:20:3a:07:10:22:f0:36:6f:
d1:e9:fc:99:88:eb:3e:a6:d8:c6:05:81:b2:99:58:83:2d:ba:
f4:fa:b7:b8:c4:a8:fc:10:2b:fb:cd:18:6c:e3:30:c0:44:ce:
b2:27:96:3b:5f:3a:92:c6:50:02:cd:0a:e8:9f:d0:bd:b9:66:
b6:2c:64:5a:34:eb:ee:b6:a9:d3:99:4d:3c:15:cc:97:fd:1f:
bc:bc:35:28:44:1e:88:24:12:30:3e:c2:dd:32:89:64:2c:cc:
b4:f7:0c:5a:29:c3:4d:a8:08:3f:3f:5a:b6:5e:56:18:74:df:
79:1c:09:79:e2:8d:8f:04:a2:1a:1c:9e:02:e9:80:9b:cd:8c:
4a:3e:b5:b8:37:e0:15:87:b3:28:6f:25:40:bc:6b:c4:45:11:
32:f5:28:a6:af:b4:12:65:82:13:7f:88:73:4c:8c:89:fc:30:
7a:31:ea:62:4e:8a:d5:6a:92:d2:c0:8b:38:cb:a2:84:3e:61:
cd:d6:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:19 2025 by rpki-client