Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: ZSMElk3mzMmn93fsgAMZnaRoLI60YDho0zXl01wYjqk=
Subject key identifier: 6A:D1:88:2B:BE:B7:A1:B6:5F:1D:EB:ED:79:7E:15:79:4A:5D:2B:B9
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0198752B9C78C1619A95BEB7E25144DCE81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 13:00:49 +0000
Manifest this update: Mon 04 Aug 2025 13:00:49 +0000
Manifest next update: Tue 05 Aug 2025 13:00:49 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: kHbGIhKge+OTQduehR6xpigqC+47/eK5Sq/RpVEfN9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:9c:78:c1:61:9a:95:be:b7:e2:51:44:dc:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Aug 4 13:00:49 2025 GMT
Not After : Aug 5 13:00:49 2025 GMT
Subject: CN=6ad1882bbeb7a1b65f1debed797e15794a5d2bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:71:d2:39:8d:e4:42:5f:30:96:51:d6:24:
90:c4:a4:a4:24:fe:c4:1b:31:aa:46:3a:03:83:30:
02:79:51:da:37:7e:3c:57:9c:91:f1:cc:c6:b9:f2:
84:98:0c:f3:02:c0:4d:4d:c8:fe:65:f8:c6:7a:52:
c0:38:ce:b8:d4:01:dc:a7:ba:bc:33:d1:94:01:67:
c6:cd:c4:20:dc:9c:ee:88:d3:56:95:e4:49:ab:6d:
74:99:d9:e8:4e:d8:83:4e:04:bd:3f:bc:27:41:ce:
ec:78:3e:6c:86:f1:5a:d4:e2:4d:be:54:30:ef:bf:
46:85:a0:e6:b0:06:5f:92:b7:68:2f:45:28:f8:1c:
74:73:5f:7f:05:f9:26:90:f2:ea:9f:fb:59:2b:46:
31:eb:9f:bf:79:22:1e:b1:23:7f:a3:cb:92:d4:97:
11:f2:f6:ba:dc:18:7e:30:0c:68:34:0d:ca:a9:53:
4a:9f:48:81:22:e4:19:74:f5:d1:fc:38:84:02:98:
ca:fa:cd:43:af:f3:f6:33:d7:29:04:05:bc:a8:e6:
f3:05:43:75:e1:37:7d:1c:63:92:c1:c9:79:8e:2e:
6c:44:42:7e:d3:78:0c:df:dd:50:83:e5:78:4b:2e:
18:16:a5:7a:56:03:da:76:7e:44:fa:11:db:9b:83:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:88:2B:BE:B7:A1:B6:5F:1D:EB:ED:79:7E:15:79:4A:5D:2B:B9
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:9e:33:21:0d:e0:bc:90:85:52:c1:2b:f0:50:97:93:06:
52:2e:05:b8:6a:d7:4b:4e:62:c5:b5:e4:1a:6d:96:34:7d:45:
62:c2:e1:3b:23:07:31:04:67:78:a2:0f:4e:6e:8a:ad:c1:11:
0d:6f:70:b0:b2:2a:81:5a:32:a9:80:06:82:41:84:5a:64:79:
de:a3:3e:1e:b2:61:e8:03:70:71:62:63:d8:8d:da:a3:1b:da:
ab:69:bd:b8:d7:61:8f:85:0f:ea:db:e2:33:ea:51:23:9b:15:
8b:78:ad:af:24:a2:2d:07:a1:1c:2f:46:44:3c:4a:99:d0:b1:
35:fd:b0:27:2c:3e:9a:c3:fe:e9:7f:87:63:07:03:1e:a2:64:
dc:d4:eb:5b:85:6a:f0:9b:d8:29:df:49:6f:ed:a9:d7:ad:fd:
8d:3f:e4:c4:da:f6:e7:53:6e:0d:1d:9b:52:28:c1:29:b5:03:
be:ee:36:2b:47:f4:a1:31:d3:22:3f:00:9a:1f:3c:01:70:40:
ec:cd:22:1b:0c:0d:73:dc:91:eb:1a:c5:06:05:56:e0:6d:dd:
e6:67:53:d1:88:8d:98:62:9a:b9:b2:8b:7d:d6:cd:31:10:4f:
73:fd:7d:0f:4e:cf:a1:fa:fe:c8:63:a1:ab:bc:3e:e3:83:01:
be:0c:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:17 2025 by rpki-client