Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: MmPtf+UvffHGBpB35SYvwtlFY0Pxa98AkeAR53AraKU=
Subject key identifier: 52:DF:D1:1B:28:08:F2:17:46:D1:A6:0F:2C:58:B9:E2:01:20:82:47
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0198914815527348126160CC10239D3E4558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 12C1
Signing time: Sun 10 Aug 2025 00:01:16 +0000
Manifest this update: Sun 10 Aug 2025 00:01:16 +0000
Manifest next update: Mon 11 Aug 2025 00:01:16 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: 4Qn+RkdiX1kpP0yRAo8BzV1rPryCq4NQ8HPIt+sIWao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:15:52:73:48:12:61:60:cc:10:23:9d:3e:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Aug 10 00:01:16 2025 GMT
Not After : Aug 11 00:01:16 2025 GMT
Subject: CN=52dfd11b2808f21746d1a60f2c58b9e201208247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:17:09:0a:62:9c:40:65:33:e3:f3:aa:8a:
cf:d6:68:e4:3a:06:ef:26:45:23:9d:f4:fb:20:57:
47:d0:41:06:c0:ae:93:fc:55:70:f9:2e:7d:01:c4:
3e:09:92:0d:f5:ec:d4:be:c7:c2:8c:07:52:c1:99:
bc:ca:58:7f:b3:5c:c6:d0:5f:45:5f:18:55:75:1f:
12:2e:d0:ed:dc:9d:ab:ae:9a:3c:6c:59:5c:5a:0a:
e1:a0:a3:db:42:ad:0f:3e:c8:30:f6:c0:e0:8f:4e:
97:d6:47:09:7e:a1:0d:77:3f:83:17:9c:bd:79:fc:
ad:d0:60:5e:f0:6e:91:ad:00:b7:46:ec:97:8a:2f:
a3:08:ea:e2:33:3b:ea:7e:8a:3c:09:db:fd:d9:e7:
80:b0:95:80:3d:a6:a6:0e:21:54:5f:5a:71:a7:0a:
97:cd:75:e1:60:92:cc:c0:88:7b:93:b2:2f:eb:10:
cf:e2:4b:86:27:b5:f8:e5:a9:74:43:3a:a7:84:06:
cc:b3:b3:af:ba:57:d2:5a:be:2d:e8:72:dc:e7:a4:
1b:87:f6:2f:0a:86:18:8f:34:21:ec:a4:f6:7f:60:
c8:59:c7:57:52:fe:8b:29:f6:0b:35:a0:a0:5c:cc:
0e:4b:f0:7c:e4:f9:23:71:09:a0:a4:a9:d2:68:20:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:D1:1B:28:08:F2:17:46:D1:A6:0F:2C:58:B9:E2:01:20:82:47
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:f9:0e:79:0b:38:8e:68:e7:90:32:da:c5:30:10:3c:3e:
84:94:bd:e1:40:65:61:cb:19:ef:15:0e:72:03:74:63:da:03:
81:8f:34:04:2b:c3:8b:29:16:20:38:f8:16:c3:f9:0b:24:85:
6f:8b:96:5f:b8:3d:5c:60:d9:24:e3:4d:62:7e:b7:09:85:17:
9e:c2:2e:32:43:19:e6:0f:70:60:9f:97:ec:9e:a3:69:c9:1a:
18:be:1d:66:84:b8:0f:02:a3:b6:48:ec:36:e6:42:e0:3f:1f:
4b:dc:9c:2e:94:17:a8:a9:44:b0:51:e2:9a:4b:11:77:d0:82:
eb:85:9b:3a:1d:04:ad:54:3c:2b:d8:2f:e5:71:cf:7d:e3:b1:
50:a8:1c:95:95:2f:a3:01:de:f8:55:ca:0d:9c:a7:31:68:76:
73:0f:e3:a1:b1:91:b8:12:0f:5d:94:21:f3:17:dd:49:9e:69:
0b:aa:ba:1b:39:29:6c:b8:ee:85:ff:5e:f6:ce:8c:05:73:fe:
42:b1:5b:8d:01:90:3b:52:18:d6:95:d7:eb:5d:31:07:fd:46:
84:bd:2f:6d:63:23:7e:55:2b:61:32:c8:55:0d:fc:b2:8b:44:
dc:2b:c8:64:a2:fe:0f:51:a4:8f:eb:8f:e8:60:fd:01:96:46:
4b:d3:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:46 2025 by rpki-client