Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: 9AMqNzF1QvZe6qbu9+8o9pwF0ZosKYQ3vY3MYoAln7w=
Subject key identifier: 48:19:9B:78:9B:39:A1:A9:89:93:32:B6:38:AB:D9:23:15:A0:0B:29
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 01988B7C9857C1CA5993AFA90A6496F76867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0A9B
Signing time: Fri 08 Aug 2025 21:00:55 +0000
Manifest this update: Fri 08 Aug 2025 21:00:55 +0000
Manifest next update: Sat 09 Aug 2025 21:00:55 +0000
Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: /YCQPzvULpJN97WI/vrWc3GFFfBiRZvK1M0HsrkcrOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:98:57:c1:ca:59:93:af:a9:0a:64:96:f7:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Aug 8 21:00:55 2025 GMT
Not After : Aug 9 21:00:55 2025 GMT
Subject: CN=48199b789b39a1a9899332b638abd92315a00b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:b5:b0:9d:76:75:aa:b1:36:42:aa:f5:83:
2c:28:b5:06:c4:eb:19:b9:aa:b6:97:f2:d0:d2:81:
86:fe:8e:8f:2c:f9:f8:74:00:10:6a:1b:ca:3d:47:
7f:69:3c:eb:cf:fc:f3:1f:fd:41:13:eb:5c:f7:15:
45:c9:e9:56:07:0f:a5:9b:78:19:88:dd:f1:2c:a8:
f8:95:7e:4e:43:c0:5a:63:57:4a:8f:3d:7e:b7:44:
fb:36:79:00:f9:85:3e:22:1d:b9:1c:dc:c6:52:a7:
4a:1d:e2:62:d3:54:be:42:e0:97:55:71:27:7e:ae:
91:39:e1:1a:67:89:8b:d5:3f:b0:4f:74:5f:d8:61:
86:43:27:5d:37:f8:b4:7b:25:f6:3e:64:7a:70:e4:
60:dc:dc:46:c3:e1:f4:b0:bc:ea:c5:82:1c:5c:ea:
8e:a2:87:f6:ee:09:9f:ec:c2:79:e7:8e:3c:45:cc:
d3:32:6f:37:ab:28:21:d2:94:1a:ac:95:17:b0:6f:
44:18:f5:36:cd:b3:58:83:b6:0b:d5:cc:4d:17:4c:
df:3d:fd:7e:1b:02:15:85:f1:22:73:53:d7:e2:de:
b2:77:16:2e:8e:07:0e:29:f1:81:90:65:9f:e4:33:
31:f2:f6:d4:88:b2:c2:53:cc:ab:af:92:bf:f2:86:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:9B:78:9B:39:A1:A9:89:93:32:B6:38:AB:D9:23:15:A0:0B:29
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:19:89:55:ee:2b:17:b7:4a:9c:9b:1c:73:47:c8:49:0c:c4:
aa:bc:91:16:92:d8:bf:06:a2:89:a5:2d:05:3f:fe:85:34:3b:
26:49:37:ad:9d:57:88:85:9f:f9:08:09:70:91:f7:eb:72:30:
a2:fc:01:eb:b4:4d:e3:85:96:f2:8a:e2:9d:77:90:09:62:c5:
c4:20:e6:56:18:14:6d:a5:f9:d7:63:b2:09:41:72:28:fc:c3:
be:89:04:ed:8b:29:8a:c4:84:9a:31:c8:fe:4c:e0:39:07:07:
ed:21:4c:c9:1c:15:47:07:59:65:c3:85:3b:13:19:85:a0:c2:
b2:1f:9b:fe:08:2f:89:f0:21:85:ad:6d:6b:0d:ea:3a:1e:51:
d8:b7:c5:34:70:ba:bf:a1:e8:0a:00:5c:e4:a6:8b:fb:77:53:
e7:55:e3:e9:d2:60:6f:1b:03:79:af:09:33:26:42:4e:de:ba:
89:7d:a0:8a:13:54:43:f7:76:55:9e:8e:a2:df:93:48:72:7c:
f3:eb:90:90:ac:cd:ec:2a:22:09:a1:89:6a:db:cd:c5:ea:87:
e7:f2:89:8a:33:b2:58:f5:a6:5d:20:68:c0:4b:f8:39:8d:72:
52:a3:f1:67:08:e2:91:b6:53:d3:40:db:e8:3a:a5:e3:34:97:
7b:bd:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:57 2025 by rpki-client