Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: OeXCv51p+5CmQw+9d7ksEt/NSulSovScnWQt+X5HoKA=
Subject key identifier: 0A:7A:AD:4D:43:AA:89:24:03:A8:C4:E3:9F:4E:F8:CB:AF:A5:7F:C3
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 0198A0839E0315BB71C9C0478DBB80A3AD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 8A
Signing time: Tue 12 Aug 2025 23:00:36 +0000
Manifest this update: Tue 12 Aug 2025 23:00:36 +0000
Manifest next update: Wed 13 Aug 2025 23:00:36 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: qEftTd2+DzlQJHyp5Ae+9v7cmlGqRurOrOeJRcZf8gQ=)
2: aizIqKjXfqxu2L9Do5SClHmuuHM.roa (hash: VG8x//8NLvTPdp7pULF9tX4PLkvXpJw9Gy/1Yk1G5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:9e:03:15:bb:71:c9:c0:47:8d:bb:80:a3:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Aug 12 23:00:36 2025 GMT
Not After : Aug 13 23:00:36 2025 GMT
Subject: CN=0a7aad4d43aa892403a8c4e39f4ef8cbafa57fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:b8:c2:06:01:8e:fd:b4:92:0f:e1:57:5e:
51:f8:67:45:94:68:f7:ca:a7:dc:d6:fb:36:8e:21:
5e:80:24:96:9e:a2:0e:6c:eb:e4:12:c9:93:a4:1e:
d7:fa:13:ff:43:f5:d3:ef:f4:ad:48:e6:e2:a0:44:
6b:1b:c4:48:81:d7:f4:6f:18:9b:a7:be:e2:a7:b0:
e8:a2:5b:81:dd:d8:62:33:2d:5a:d8:61:17:d0:8c:
4f:ee:12:ef:7f:a8:5b:94:81:72:e7:81:d3:85:cb:
34:6a:48:d4:bd:d6:47:12:2f:f3:81:84:7e:3e:74:
39:c2:e5:9d:1b:6b:8d:d3:e5:c0:13:14:7a:88:f2:
ed:6e:aa:75:56:f9:60:9e:83:a6:b3:26:77:41:c6:
38:17:7b:86:2d:4b:ac:84:b5:80:0d:16:25:7c:68:
3b:b3:18:51:64:0f:92:d2:7f:db:5a:49:b0:a6:8c:
9b:69:b8:2e:86:c7:53:2f:1f:d4:e1:ca:92:6c:84:
5b:63:4f:ab:4d:4a:f1:e4:76:7a:b2:a0:d7:1c:5f:
05:d6:c1:80:eb:c6:c8:d5:5d:ac:73:f1:d6:18:04:
2a:d6:78:2c:41:ed:73:50:a4:de:32:4f:6d:8b:bf:
69:b0:b3:29:c4:10:7e:7c:96:f7:3b:5b:0e:aa:b1:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:AD:4D:43:AA:89:24:03:A8:C4:E3:9F:4E:F8:CB:AF:A5:7F:C3
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:c7:ea:3c:dd:80:bb:8e:d6:27:b8:2d:2f:88:92:14:5c:
ec:81:0b:f5:72:56:6e:11:68:0d:6e:ac:ba:6a:4e:8a:52:ce:
21:0c:f8:9c:a3:4d:da:79:cf:25:08:b5:f8:36:80:6d:77:19:
f1:f5:a5:a3:0b:7c:82:ea:3b:98:01:ee:4e:89:5b:74:a2:c5:
72:04:57:01:03:08:32:17:ab:1d:7f:a8:3c:dd:83:28:8f:e0:
ed:c1:5f:c9:8d:45:62:bc:b1:1d:fe:2f:e5:d2:1d:b1:71:e6:
fb:7a:59:d8:68:1b:8e:d8:45:60:ff:47:27:54:2e:a4:b3:33:
10:81:5c:6b:5e:0a:f8:87:98:f3:ad:c8:d4:04:3c:00:15:ea:
5b:20:3b:51:77:1f:dc:a6:78:8f:63:44:fd:9c:ad:18:af:88:
bd:fb:46:39:90:71:31:84:91:fd:38:c7:2d:44:49:f7:f8:6a:
12:ba:41:73:ae:27:4d:4d:c6:68:15:12:b5:24:9c:16:66:2a:
a4:7f:00:58:c8:a4:cc:d6:b0:1d:c1:64:dc:d2:79:83:3e:64:
c5:a9:e8:1b:42:6c:f6:ce:c0:70:2f:e8:19:9b:69:df:e3:8e:
3e:8b:a1:ab:50:e4:96:a9:ba:17:09:1c:90:f6:45:fa:ee:40:
dd:ce:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:53 2025 by rpki-client