Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: bL6AsFP7h/5uRElycERuG0DmErwZ567Ni0xB5IlesQM=
Subject key identifier: B4:0F:02:11:B7:B9:F8:98:9B:CB:42:B2:98:0A:F1:18:B9:0B:84:B5
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01989AF075E0AA531361E740EDD995A96FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 163B
Signing time: Mon 11 Aug 2025 21:01:46 +0000
Manifest this update: Mon 11 Aug 2025 21:01:46 +0000
Manifest next update: Tue 12 Aug 2025 21:01:46 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: JBlEMRcs9+zExrWZqS4qxMQL2EVVfol16N26jYUNcgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:f0:75:e0:aa:53:13:61:e7:40:ed:d9:95:a9:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Aug 11 21:01:46 2025 GMT
Not After : Aug 12 21:01:46 2025 GMT
Subject: CN=b40f0211b7b9f8989bcb42b2980af118b90b84b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:2b:9c:75:85:54:2c:7a:82:12:75:45:7d:
19:94:4a:0b:08:aa:b1:e4:e5:1b:44:51:71:19:57:
29:3a:79:2c:42:aa:d9:70:dd:e9:41:35:b1:cd:54:
15:c4:7b:a6:22:6e:30:c5:28:44:a0:a8:1a:a5:1a:
5d:c0:bf:19:68:4f:b6:7b:0b:6b:9b:16:6d:df:6a:
27:b8:ed:a2:75:e8:a2:d4:b4:72:45:38:ce:62:09:
08:3e:cf:87:a4:0c:53:e7:a7:37:69:a9:b0:49:6d:
49:1b:13:09:e0:51:85:b9:a9:5d:3e:75:d8:ed:69:
5c:73:36:cd:47:09:a9:e8:bb:60:7f:b5:72:63:81:
16:bc:be:4a:5a:72:b4:67:a6:46:5b:17:0a:23:aa:
64:b4:68:6c:bf:dc:f8:f4:7e:29:06:4b:c4:29:fb:
bd:ce:6c:29:8a:13:cd:1b:48:e2:a2:f5:c6:22:f2:
f1:dd:0e:29:dd:d1:d5:51:48:a2:0c:56:2b:02:c6:
f4:ec:7e:f7:4e:94:0a:02:da:f8:48:94:9f:d6:7c:
a4:dd:12:39:71:dc:6a:01:5b:23:de:18:50:cc:27:
66:7e:2b:b4:00:28:a6:e5:5f:9a:0f:a4:a7:29:b7:
b3:75:05:c6:39:2f:56:3c:0a:c2:94:3b:48:67:c5:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:02:11:B7:B9:F8:98:9B:CB:42:B2:98:0A:F1:18:B9:0B:84:B5
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:31:e9:1b:47:98:da:9c:2e:45:78:7a:16:78:b1:94:ae:1c:
29:f1:94:64:90:62:b1:0e:f3:d7:93:8e:77:2e:4f:18:03:9b:
db:1a:98:0c:4f:bf:4b:a3:7c:af:dd:88:0b:5e:5d:f3:20:a2:
2e:b0:22:61:63:2d:83:ae:27:82:00:31:28:e2:ff:66:ff:9a:
e0:43:4e:a2:f0:14:1f:ed:c4:c0:46:8b:2a:99:43:f4:8f:95:
a5:4f:21:9d:d0:18:bf:a8:cd:92:f9:d3:55:78:28:af:89:7b:
a9:fd:1e:7b:b0:49:02:73:1f:9d:08:82:32:f2:68:56:54:19:
0c:69:89:4f:8a:21:13:59:ad:48:bc:00:e6:84:dc:47:f0:18:
9f:15:7d:6e:c1:83:fb:55:7e:d3:e1:4d:b7:e2:44:b4:70:99:
73:6f:24:89:6d:2e:26:1e:42:aa:58:a2:f9:77:f8:d8:b8:9a:
91:1c:b6:32:ee:62:d2:8d:c2:9b:44:33:b5:4c:95:7f:e6:dd:
95:df:ad:9d:c9:b0:ca:3b:7d:0e:7c:60:03:37:a9:98:c4:28:
38:a0:30:99:3f:0b:c9:d3:99:9f:5a:2b:50:24:5c:50:15:02:
5f:21:b7:f5:d5:16:bb:a4:dd:05:e3:82:63:20:58:ad:42:eb:
e0:c3:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 04:16:55 2025 by rpki-client