Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: d6OK0TMhdW/LldsLdET81MfsiSEaLytZutr6giuhhOA=
Subject key identifier: EF:6F:3C:CD:86:9B:7E:B7:0A:57:F1:C9:5F:81:98:47:B4:74:38:C8
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 01987BD2418E72CDECCDFBE5F1E6E3B24466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 043C
Signing time: Tue 05 Aug 2025 20:00:33 +0000
Manifest this update: Tue 05 Aug 2025 20:00:33 +0000
Manifest next update: Wed 06 Aug 2025 20:00:33 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: 8j8kPlmilxaa9EaELUAObGY8QxC9/0JHIxfNtgxduAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:41:8e:72:cd:ec:cd:fb:e5:f1:e6:e3:b2:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Aug 5 20:00:33 2025 GMT
Not After : Aug 6 20:00:33 2025 GMT
Subject: CN=ef6f3ccd869b7eb70a57f1c95f819847b47438c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:e1:f1:24:ce:a0:7c:05:fa:d9:72:25:65:
8b:86:b5:f8:a3:d5:c2:c5:90:3c:eb:6d:c4:6b:2d:
75:07:31:ca:63:e6:36:8f:12:42:3c:e9:26:9f:35:
73:88:de:f4:a0:c0:82:42:de:54:78:62:24:b2:49:
15:58:1f:30:c2:4c:f4:38:ba:ee:bf:af:42:c8:2e:
b9:75:40:40:15:a4:5d:05:ef:e1:29:46:18:5a:07:
a9:c6:82:58:51:bc:f2:f0:83:b6:32:2d:e4:a3:0b:
bc:06:25:bb:fc:f7:10:64:49:a9:f0:2a:39:da:cd:
b5:b4:07:5b:84:17:4b:5e:d6:4e:57:4f:6f:ac:49:
a5:e9:ab:e6:a7:0b:81:b6:66:5c:8a:59:d2:cd:9d:
df:bf:b3:cf:54:cf:b4:90:9c:08:38:68:71:9a:62:
5b:30:df:49:10:3a:c4:d4:41:a8:3b:9b:91:52:dd:
38:30:b7:2a:ad:cb:cf:61:49:e2:54:8a:6b:b6:bf:
3e:50:fd:ba:d3:a7:e5:9c:12:68:5a:2b:9a:95:ae:
8f:8d:43:38:dc:4f:73:3a:17:46:1c:19:b3:21:75:
6d:90:69:00:bd:f6:55:e4:55:08:9b:9e:95:18:2a:
b8:11:b3:88:60:01:1e:62:89:f0:28:20:0e:de:4b:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6F:3C:CD:86:9B:7E:B7:0A:57:F1:C9:5F:81:98:47:B4:74:38:C8
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:15:5e:ae:cf:1a:fa:14:25:53:47:72:ea:c9:ed:ca:fe:
a0:2d:ad:e6:f2:9b:85:4b:e1:26:4a:76:e0:22:83:7d:30:61:
26:dc:b9:87:3e:29:02:dc:79:45:05:f4:0e:24:0d:b7:a0:46:
80:90:8c:a2:7c:58:04:38:66:ac:bf:a9:c5:ca:ad:e6:e4:6c:
cd:b8:c8:71:40:a9:b6:53:52:9c:c3:cb:3e:3b:e0:53:ea:52:
d2:6d:92:9d:e5:9c:90:d0:11:ea:1f:ea:40:dd:7a:84:e5:3f:
91:bb:89:3e:05:08:d1:75:4c:70:40:2c:29:b1:f6:eb:d0:f9:
7c:4d:f4:1e:08:87:76:8f:f8:24:80:7b:50:5d:dd:cd:50:99:
1a:e1:78:62:8b:72:10:27:0e:79:ea:d2:d7:77:84:82:f4:92:
10:86:5b:ea:9d:c3:c4:55:93:36:43:9f:ee:b7:26:2a:cb:34:
32:9e:74:1d:c0:97:e8:67:c5:23:42:b7:fd:09:95:e9:dd:8f:
ba:07:0f:2a:40:dc:1e:c7:ec:da:24:e5:8a:53:fb:be:f6:1d:
00:27:df:73:78:1a:d6:b4:bf:49:44:66:43:c6:51:59:fc:54:
34:37:d1:df:19:49:e9:18:5c:34:9c:b2:a2:eb:b4:31:60:93:
13:74:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:37 2025 by rpki-client