Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: b9QA21ijRuJbDkqxSDk8opalHeeadZYjgjvx1/iIyYk=
Subject key identifier: E6:08:A9:D8:B7:68:D1:20:38:AC:31:D0:1C:9F:46:E8:CD:D4:01:8A
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019873E37CCEB182357AB739910292351B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 13D5
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: N2wfQY8BZbvdkifzTVXAiynFF3fxClI0fheWYyEhysM=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7c:ce:b1:82:35:7a:b7:39:91:02:92:35:1b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=e608a9d8b768d12038ac31d01c9f46e8cdd4018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:24:3b:5a:a3:42:cd:53:e7:ed:78:ae:e4:
ef:8c:41:e4:7a:36:c9:13:35:a2:90:90:2a:f1:18:
5b:05:11:36:52:c1:84:6b:f7:64:ef:b2:ed:54:a5:
77:56:42:05:26:f7:16:3d:42:8d:70:f3:51:da:0d:
e6:8f:98:df:54:da:29:45:4c:ba:3b:dd:e5:82:5a:
78:15:e4:2d:aa:03:86:b1:12:7c:68:03:77:70:b3:
7d:75:c0:bc:a8:58:0c:61:1f:26:aa:64:d5:dc:69:
36:43:af:36:34:14:0a:bb:9e:4a:fb:76:1e:da:10:
c4:9c:bb:77:aa:70:71:d6:e0:77:fc:87:13:04:d3:
d7:c1:ca:9e:37:10:30:3a:74:8a:51:6d:f0:75:1f:
30:f6:81:5d:1b:01:50:45:92:d2:b5:03:5b:05:d3:
29:86:48:34:7e:bf:84:d0:4f:fa:2e:f6:da:bd:a2:
d4:ce:66:28:7a:20:94:5d:f7:5b:56:4f:b5:4b:ac:
af:ea:76:a6:c8:bc:4c:78:ca:81:aa:db:78:de:ae:
9e:ca:1e:83:88:f6:23:ce:5c:8b:c6:9a:2a:33:72:
60:3e:1e:fb:7c:48:1c:93:08:37:cd:14:27:30:5f:
9a:d5:95:16:79:2a:4a:c6:6c:06:81:d3:e6:1d:f8:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:A9:D8:B7:68:D1:20:38:AC:31:D0:1C:9F:46:E8:CD:D4:01:8A
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:30:a6:35:b0:bb:a1:5f:83:44:12:6d:92:f7:fc:d0:6f:20:
f7:f6:19:3b:17:a1:e7:b5:a5:bd:d8:69:41:cb:fc:98:ac:e9:
17:b1:0c:cb:7f:3a:a7:18:22:45:f7:20:30:a1:84:9f:d3:a7:
d9:6a:05:5e:0a:5c:28:aa:35:a9:76:54:bc:37:9f:b8:ae:6b:
dd:6d:4d:97:46:20:1f:79:0f:b9:29:1d:1d:46:45:b0:c3:3d:
da:35:bf:16:a9:18:38:d7:0e:ab:ac:b3:49:fc:ac:57:f9:35:
32:67:c0:2d:55:c5:27:24:c6:26:ad:36:3f:a7:8c:75:4e:ff:
0a:ff:eb:de:fa:7a:dd:b9:84:e2:36:90:c4:98:9e:99:20:2f:
fd:51:bf:b1:bb:4f:c9:95:bc:25:f7:03:60:e3:52:d1:65:41:
9e:78:09:78:ff:ec:54:7f:b1:c8:07:f5:02:76:4e:e8:d6:88:
d9:6e:49:6c:38:d7:95:1c:2d:39:f2:36:86:8b:c6:5b:ec:8b:
e6:72:6a:3b:5e:8f:02:19:c7:8c:a6:f8:6a:60:d5:19:22:de:
2f:fe:5f:20:6a:ed:62:61:30:19:ab:77:58:29:e5:db:fa:11:
f8:fc:ea:9e:1f:dd:2a:f7:2e:c4:87:2c:44:23:2f:00:c6:38:
ef:4e:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:41 2025 by rpki-client