Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: 9hbyo8W52JVBNnsvTMU+rp6MXKZMxw5A98Qk8Cjm+jc=
Subject key identifier: 7B:AA:6A:C3:93:F9:47:0A:EF:6D:AD:26:85:0C:0E:67:75:FB:92:69
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0198782D552616B06D7C36445BDCF89883CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 03:01:33 +0000
Manifest this update: Tue 05 Aug 2025 03:01:33 +0000
Manifest next update: Wed 06 Aug 2025 03:01:33 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: pdQRcGotx7UW1FUI4V70O/uM00j12PjyREvJUsJ0Ze0=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2d:55:26:16:b0:6d:7c:36:44:5b:dc:f8:98:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Aug 5 03:01:33 2025 GMT
Not After : Aug 6 03:01:33 2025 GMT
Subject: CN=7baa6ac393f9470aef6dad26850c0e6775fb9269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:f7:76:57:d7:00:94:9c:eb:c8:e7:d8:f9:
3e:25:d6:28:c1:7a:b8:3f:52:43:39:ed:c4:e7:1a:
28:d7:97:74:6e:b5:4f:b6:96:9b:9a:e8:b9:9c:90:
a9:57:0c:11:fd:7e:7b:c1:24:db:93:e7:4b:5c:a1:
25:a1:de:85:53:7c:d4:7b:9c:71:ca:72:e4:f4:e3:
3c:db:57:40:4b:ec:15:04:d8:5e:83:29:21:78:12:
73:23:68:3a:01:c0:1d:f2:3f:29:c4:53:c2:76:67:
8a:73:0e:5e:64:f2:5a:a0:50:e5:33:28:2f:9d:57:
55:b8:ac:72:83:7c:38:2c:da:72:24:e1:7a:88:e1:
37:8f:b4:83:56:60:2a:df:41:86:bf:d0:24:55:ee:
d3:17:84:39:54:d6:db:2c:9e:82:7e:c6:30:cc:23:
0c:23:b3:d1:32:17:fb:60:12:73:90:43:f6:b4:71:
2b:1f:b4:ea:40:31:69:83:1d:d6:d9:d8:8c:5c:52:
12:d4:15:07:95:57:40:8d:5a:a6:2a:2c:d8:8f:61:
28:6a:05:b8:e3:f3:63:1f:63:7e:64:b5:b7:dd:63:
dc:9e:f7:f8:90:49:ed:95:42:f0:a7:14:75:1f:b6:
1e:91:9c:79:5a:97:c1:f1:16:cc:f8:16:6d:af:af:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:6A:C3:93:F9:47:0A:EF:6D:AD:26:85:0C:0E:67:75:FB:92:69
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:2b:fb:a4:23:b1:1d:cd:13:d9:fc:5c:27:77:bb:b2:00:
51:ea:0c:a9:af:30:c6:65:dd:90:61:68:b0:f3:a1:22:41:35:
47:a4:7f:90:09:d7:95:72:a5:79:6e:c0:a2:3f:b1:cb:56:34:
a8:6a:5b:12:ff:43:db:f9:57:c2:24:dc:d8:c3:69:b4:9b:7f:
e7:e7:12:26:a8:d6:d6:8c:91:0b:cb:6c:75:76:65:b7:3c:6c:
2e:96:ca:a8:d6:f9:67:8b:3e:21:c2:09:58:e4:20:00:35:47:
50:ef:96:06:ae:2f:ea:37:1f:8c:aa:0b:02:34:a3:81:a0:ea:
c5:64:33:6f:7d:59:97:56:b0:74:1b:2c:17:2f:30:ca:a1:c7:
04:ce:e0:54:e0:8d:ef:73:53:cc:9b:e0:2f:60:c6:96:a8:88:
2b:be:5e:c8:0e:0c:5a:c4:b8:3a:42:8d:12:b1:37:4f:76:82:
88:10:c0:e0:68:b5:44:47:69:b7:fc:7c:4a:c8:d0:e8:91:6f:
dd:66:68:19:46:ff:c5:1f:be:7d:75:9e:7d:38:71:7f:b4:3a:
ca:d9:7c:1c:d7:74:a5:c8:3e:15:9d:d7:05:92:11:38:0a:aa:
eb:2e:0f:dc:b6:ff:69:ef:0e:dd:a0:31:9c:97:e8:25:c5:b8:
e1:18:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:07:58 2025 by rpki-client