Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: jK7K6Ls6e5MBg+BrkDPlWUWLAaQo+hhZ3ALJUWOzZdI=
Subject key identifier: 43:BB:C1:41:37:D3:BD:17:85:5E:0A:53:DC:E3:40:2C:A6:44:F5:86
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 0198744FCBF1DC335C52587463DC381FB72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 09:00:43 +0000
Manifest this update: Mon 04 Aug 2025 09:00:43 +0000
Manifest next update: Tue 05 Aug 2025 09:00:43 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: yYBLa+XjWCyg9mnQ+uS3KyWh75EkhDpfjwEemq0JeVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:cb:f1:dc:33:5c:52:58:74:63:dc:38:1f:b7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Aug 4 09:00:43 2025 GMT
Not After : Aug 5 09:00:43 2025 GMT
Subject: CN=43bbc14137d3bd17855e0a53dce3402ca644f586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:44:e7:a7:4a:05:00:70:6b:a2:22:01:51:
9c:2c:f4:f6:13:a1:a2:d4:fa:6c:40:3b:4c:c4:1e:
9e:21:65:a3:3b:0a:c4:71:8c:c5:94:6d:8b:94:b0:
01:c2:30:12:54:bb:de:1f:ca:d2:eb:da:f9:c2:37:
07:9b:fe:6f:98:c9:ee:e6:50:65:35:72:ae:61:e5:
2e:e6:31:95:4e:e0:d3:58:c6:70:2d:51:79:8a:fe:
9b:ed:ef:03:ce:73:67:93:4a:df:1b:e9:d8:3f:74:
21:8f:3c:d2:e0:0e:0f:93:03:47:b9:d6:27:53:23:
33:f9:da:b5:13:bb:18:8b:f7:21:5e:d9:d3:f9:a4:
36:6b:f3:e3:95:62:08:a8:5d:82:ed:5e:03:09:c4:
f9:67:f1:8e:3f:b1:89:45:f5:fd:b8:7e:82:11:74:
22:14:f2:6a:3e:94:74:ef:d4:e4:9a:87:a0:91:e5:
c1:5e:c5:b4:86:4e:df:25:72:b3:32:3f:7c:64:d0:
a9:68:d7:2f:41:c4:86:c2:00:25:35:e8:62:a3:ab:
be:d9:0f:47:4e:22:53:07:5f:b8:fb:53:fb:cb:1a:
00:4b:35:70:51:04:75:cd:90:13:b0:22:cd:c3:c8:
90:14:81:11:d4:d5:37:a2:c7:b8:66:be:47:49:37:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:C1:41:37:D3:BD:17:85:5E:0A:53:DC:E3:40:2C:A6:44:F5:86
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e3:1b:3a:85:28:ce:8b:02:bc:2c:a3:94:05:a9:98:ec:08:
82:33:1c:3c:8f:12:9a:44:19:cf:3c:c8:a3:12:ca:32:1d:ee:
24:d0:19:6e:18:63:aa:29:6a:e3:23:93:70:f7:e2:b0:82:b0:
1f:0c:b4:aa:3c:7f:81:21:a8:2c:09:69:da:e6:61:3d:ac:3e:
80:8b:77:ca:f1:4a:f2:f1:ae:09:cf:08:89:c3:df:6c:a7:db:
52:91:7e:ab:33:7a:ba:e1:9f:f0:96:ff:ef:26:be:9e:23:97:
de:7f:7f:06:5a:9d:0b:97:83:c0:40:24:cc:ba:09:51:2e:de:
48:52:3c:c5:9f:49:fb:14:a6:5d:c8:97:8a:66:18:dd:67:8d:
cd:81:e1:09:36:ed:c3:49:a1:f8:80:2c:d1:af:78:f8:e9:1a:
c4:1a:d9:09:35:87:fd:e0:d0:50:42:7f:4b:3a:47:2f:4f:da:
f0:ab:44:50:65:1d:74:99:78:38:0b:04:c9:d3:75:a9:32:98:
39:6f:36:de:a3:9d:bb:b8:3e:f7:c1:e6:0b:3f:c7:97:d4:dd:
a8:60:eb:95:9a:c9:fa:97:ab:b8:31:e6:9f:26:2a:aa:39:3a:
55:83:10:5f:92:89:a1:e5:f9:06:78:3a:04:31:00:53:0f:ec:
69:6d:4e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T8vx3DNcUlh0Y9w4H7cuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmEyYzNlZWRiNzk3NmQ5Y2UzMDQ1ODFmMjM1MzJmZWNi
NDZlN2YwHhcNMjUwODA0MDkwMDQzWhcNMjUwODA1MDkwMDQzWjAzMTEwLwYDVQQD
Eyg0M2JiYzE0MTM3ZDNiZDE3ODU1ZTBhNTNkY2UzNDAyY2E2NDRmNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RZE56dKBQBwa6IiAVGcLPT2E6Gi
1PpsQDtMxB6eIWWjOwrEcYzFlG2LlLABwjASVLveH8rS69r5wjcHm/5vmMnu5lBl
NXKuYeUu5jGVTuDTWMZwLVF5iv6b7e8DznNnk0rfG+nYP3QhjzzS4A4PkwNHudYn
UyMz+dq1E7sYi/chXtnT+aQ2a/PjlWIIqF2C7V4DCcT5Z/GOP7GJRfX9uH6CEXQi
FPJqPpR079TkmoegkeXBXsW0hk7fJXKzMj98ZNCpaNcvQcSGwgAlNehio6u+2Q9H
TiJTB1+4+1P7yxoASzVwUQR1zZATsCLNw8iQFIER1NU3ose4Zr5HSTdlgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO7wUE3070XhV4KU9zjQCymRPWGMB8GA1UdIwQY
MBaAFKNqLD7tt5dtnOMEWB8jUy/stG5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGIt
ZGRlMTkyM2JhNzI0LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGItZGRlMTkyM2JhNzI0
LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeMbOoUo
zosCvCyjlAWpmOwIgjMcPI8SmkQZzzzIoxLKMh3uJNAZbhhjqilq4yOTcPfisIKw
Hwy0qjx/gSGoLAlp2uZhPaw+gIt3yvFK8vGuCc8IicPfbKfbUpF+qzN6uuGf8Jb/
7ya+niOX3n9/BlqdC5eDwEAkzLoJUS7eSFI8xZ9J+xSmXciXimYY3WeNzYHhCTbt
w0mh+IAs0a94+OkaxBrZCTWH/eDQUEJ/SzpHL0/a8KtEUGUddJl4OAsEydN1qTKY
OW823qOdu7g+98HmCz/Hl9TdqGDrlZrJ+peruDHmnyYqqjk6VYMQX5KJoeX5Bng6
BDEAUw/saW1OPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:56 2025 by rpki-client