Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: fuPrJr0gWWljxsv0riqq+P3ZJQstA2LyXBUCY9QSzf0=
Subject key identifier: 6A:2D:2A:98:76:5D:60:E4:18:15:B0:D3:BD:2B:EB:F4:1D:32:6D:80
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019873E38AEF9B8B11427A877427808119F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: ehWPHfE1gC4jr89YqZw22iGWXuM8XxqbS9P2NhFOK5k=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:8a:ef:9b:8b:11:42:7a:87:74:27:80:81:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=6a2d2a98765d60e41815b0d3bd2bebf41d326d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:b1:ce:70:7e:f2:49:53:82:e9:bf:7e:7f:
71:a0:14:60:b0:a6:23:08:66:ee:9f:eb:8c:a5:58:
72:83:6c:6b:a3:f4:96:20:04:ba:0c:20:e0:46:6f:
70:92:62:35:2a:61:5e:40:48:95:bd:18:14:db:1c:
cf:bc:e5:c0:55:65:54:d1:9e:4e:d9:11:4f:c8:7e:
e6:9a:23:d4:56:36:57:44:c5:cb:3f:48:d1:73:f7:
37:4c:e4:b3:07:68:07:88:a5:de:d5:db:be:09:c2:
ed:65:0d:25:e7:52:38:63:ca:5a:28:c5:c8:45:42:
7a:55:32:32:52:68:29:5c:3a:15:c6:60:6c:98:29:
7a:f6:d1:99:75:e0:55:00:24:fc:28:44:8d:29:d1:
52:bd:09:9e:ac:a5:0d:ec:6e:32:59:1d:ff:b5:73:
a5:a6:df:c1:3e:ff:54:e2:67:cd:c8:b6:ec:9a:da:
00:14:88:87:06:ec:df:47:42:c6:6a:44:30:fa:94:
54:2c:45:a6:1a:8b:3e:ab:f9:91:66:1e:ce:fe:13:
36:03:96:4e:5d:52:51:d3:ca:4e:dc:08:ed:db:5b:
0d:90:70:83:d0:6c:31:2b:ec:9f:5f:ad:0a:82:40:
20:e2:1a:73:b9:91:47:3d:8e:99:f1:14:18:81:94:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2D:2A:98:76:5D:60:E4:18:15:B0:D3:BD:2B:EB:F4:1D:32:6D:80
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e1:e0:53:c3:02:31:6c:58:71:8b:0c:56:6b:f5:35:e7:80:
fd:75:24:4c:58:8d:5a:6a:e3:88:6a:16:9c:f0:a1:08:72:71:
74:a2:aa:b3:4e:2d:e8:7e:8e:19:77:ba:b8:45:f4:f6:e1:37:
23:81:d0:1f:3c:5f:dc:5b:a7:13:bb:d1:b7:00:35:a2:d3:6c:
2b:4e:47:33:fc:ed:72:12:da:38:2a:36:33:a1:b0:b5:0b:a5:
08:45:b7:e9:90:fc:18:74:dd:28:61:9d:f0:44:34:f3:6d:f6:
58:68:5d:ff:21:13:37:f1:58:dc:99:5a:6b:6e:e6:18:dc:bb:
7c:31:f6:14:da:75:a8:25:38:3e:9e:f0:16:23:6e:a0:ff:76:
f3:fe:00:c3:2b:bb:1a:03:31:61:e2:01:b0:c0:fe:98:8e:e4:
e3:1d:cd:1f:1c:e4:dc:a3:ed:77:93:e2:5c:77:aa:bc:71:a3:
8a:e9:e0:bb:9c:0f:a3:06:da:b1:ee:b1:7f:05:ba:f6:7f:77:
99:e2:64:50:d7:d6:b0:76:dc:cf:79:04:77:79:74:58:7f:cd:
f7:9e:ee:5d:e1:1f:e1:d4:91:88:cb:db:6a:e7:9e:fc:c1:5d:
65:e8:c1:d6:7a:6e:35:24:ef:08:36:37:63:a8:07:79:54:9f:
00:cc:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:38 2025 by rpki-client