Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: 8EpWfKUUINuikta3zKwwYENBhIT3wnCty8pYua553Ic=
Subject key identifier: 83:A9:21:FE:6C:4B:99:13:58:D3:01:94:D2:71:22:25:50:02:79:1E
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 019893DB3884CD7EDF15FDFFAC23732B1E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 1335
Signing time: Sun 10 Aug 2025 12:01:14 +0000
Manifest this update: Sun 10 Aug 2025 12:01:14 +0000
Manifest next update: Mon 11 Aug 2025 12:01:14 +0000
Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: ySRilcJwhP9XyvEdsU7pV3jjGBWL6GSEyC7BvXyifjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:38:84:cd:7e:df:15:fd:ff:ac:23:73:2b:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: Aug 10 12:01:14 2025 GMT
Not After : Aug 11 12:01:14 2025 GMT
Subject: CN=83a921fe6c4b991358d30194d27122255002791e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:ef:92:6c:37:56:a3:d5:8d:8f:cf:97:62:
b2:41:7f:83:4f:95:7f:ac:cc:3d:f5:42:cc:07:d0:
fc:01:ed:30:f2:3b:7a:73:aa:01:41:ef:5c:52:7e:
ad:12:47:9a:22:1d:68:01:5a:09:fa:21:8e:ec:1b:
47:d5:0c:e3:e4:af:b7:95:5c:1e:cd:d1:71:5d:17:
4f:de:74:18:86:dc:25:3c:63:d9:3c:e1:75:ea:6c:
e9:35:3b:6a:97:2b:f1:0f:f7:5a:88:d8:2c:51:09:
55:5f:08:df:bd:89:95:88:a9:08:da:c4:f3:9c:b9:
70:6f:0b:00:f5:d0:b1:92:39:a6:a6:fe:34:ef:70:
26:52:b3:a3:52:7d:66:1b:25:e8:62:fd:92:37:d2:
82:37:77:46:a1:12:8b:20:34:1c:1b:d5:b5:ba:a7:
62:0e:d7:2e:36:7c:64:e9:e4:84:9d:60:c5:73:3c:
59:f6:f8:7a:c7:eb:da:41:d8:36:85:b5:6a:2b:eb:
c2:b7:c9:20:44:a0:20:3e:04:bb:dc:95:30:49:6d:
a3:55:76:e0:51:8e:56:6e:3a:64:86:16:58:5c:fa:
f6:cc:67:ac:8c:ce:cb:6a:51:12:8e:4d:6b:12:ce:
3f:13:d5:70:74:bc:19:3d:10:23:dd:a1:e7:8b:51:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:21:FE:6C:4B:99:13:58:D3:01:94:D2:71:22:25:50:02:79:1E
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ab:ab:5a:ce:a0:8f:cf:12:fe:ba:9b:6b:be:42:a3:99:a5:
4b:05:8d:69:4d:9d:04:1e:85:f4:48:c8:9d:da:3d:2d:6c:d5:
c3:96:b3:92:0c:14:4d:d5:11:c5:39:ff:6a:b5:50:9e:51:25:
31:06:34:0c:d6:93:aa:9a:41:ed:28:ff:03:16:d8:e8:ca:5d:
53:5b:5d:05:8d:25:df:96:4e:5a:d6:85:b9:f3:39:8b:07:1a:
6a:9a:04:7f:5a:a7:f9:64:fd:33:ee:3a:b8:39:e6:a4:5f:16:
0b:58:f7:b8:16:9e:a1:b3:b0:ad:42:d5:92:c6:96:f1:2c:e8:
04:96:90:17:b8:fe:2f:69:48:8b:dc:3f:82:0d:df:55:c5:b0:
2b:73:f6:f4:93:ef:36:7a:03:b2:04:12:3d:11:0d:68:70:d6:
09:47:05:ee:97:fc:25:ee:90:8c:53:ea:ce:b8:2a:b4:c4:0b:
06:77:9b:ca:b2:f4:30:db:d5:d8:02:45:10:d7:51:92:b9:4d:
3e:dd:dc:c1:f8:fe:e9:8e:40:ca:cc:e6:c1:5b:3a:8f:67:8a:
85:cf:bd:74:4a:89:64:b8:88:d1:35:80:3e:11:68:70:a8:ff:
6b:54:af:ac:8b:18:a0:be:a2:96:92:04:4a:12:31:d9:69:21:
b4:3d:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:20:42 2025 by rpki-client