Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: rEcMHt0LrqbT+fkKE9wB7BPLFPoamP3gDaJs/MYHIiM=
Subject key identifier: 35:F4:01:6A:EC:52:CD:DE:1A:9B:C2:2D:72:E2:A7:06:F4:9C:F3:A9
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 01988DD904E38953EAC0D602EAA9E80DB54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0B59
Signing time: Sat 09 Aug 2025 08:01:06 +0000
Manifest this update: Sat 09 Aug 2025 08:01:06 +0000
Manifest next update: Sun 10 Aug 2025 08:01:06 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: IgaoT4q6K7L5rUsI2g3+YQgVevQ8ZLHTTQGQCHGzi+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:04:e3:89:53:ea:c0:d6:02:ea:a9:e8:0d:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Aug 9 08:01:06 2025 GMT
Not After : Aug 10 08:01:06 2025 GMT
Subject: CN=35f4016aec52cdde1a9bc22d72e2a706f49cf3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:fa:5e:c7:8d:72:65:a9:c4:8f:4c:c0:26:
c0:b9:3b:81:f5:8f:23:a9:f1:d6:86:de:c1:a5:f2:
b4:81:c7:dc:ed:26:b2:0a:63:a1:e1:fc:6d:69:76:
47:33:95:06:8a:3a:e2:59:ad:eb:22:07:17:6a:91:
c7:65:8e:10:5e:3a:79:41:0e:aa:cb:be:4d:30:bf:
e4:92:c0:89:cf:73:84:ec:a5:e6:19:9a:61:eb:78:
df:78:1c:24:de:66:00:fc:b5:09:f5:d8:bf:b7:c9:
c7:c3:0f:c7:4e:1e:a1:8d:99:09:20:31:e8:62:1e:
eb:27:3f:47:fb:8f:c3:66:48:ec:d3:bc:47:76:2c:
33:91:bc:b8:a0:d7:62:ee:56:2e:14:72:be:03:64:
14:9c:78:6e:1a:f5:a4:13:c8:4b:51:da:6f:5d:86:
15:f0:b7:50:e4:e9:a0:5f:c1:08:a2:bd:95:85:f7:
a5:1c:22:b4:73:e7:22:19:33:5b:44:55:a8:cb:75:
14:74:e1:96:35:0e:c2:d6:4a:19:bf:28:63:05:da:
bc:c3:ed:72:c2:48:a1:ef:8d:79:74:47:22:e4:57:
fc:62:8d:93:73:56:0e:7e:7d:0c:3f:65:db:43:f3:
fb:9a:b7:98:70:95:1c:a3:1a:bf:7d:b9:84:90:72:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:01:6A:EC:52:CD:DE:1A:9B:C2:2D:72:E2:A7:06:F4:9C:F3:A9
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:fa:c6:7f:38:45:02:03:e5:f8:47:65:04:85:9e:af:ba:
d1:22:e5:73:f2:f5:b0:4f:be:32:34:83:be:7c:08:1a:b0:d6:
89:73:ba:58:64:1c:5d:b5:c1:68:27:f1:b8:29:39:76:23:b4:
5d:6e:8d:25:11:53:9a:a4:e4:51:4d:b3:b6:1b:c9:69:72:86:
59:52:75:46:97:07:38:1c:a8:bd:6a:4c:7a:c3:79:1b:5d:5e:
40:22:85:7a:d3:c8:a9:e0:fd:38:b0:19:51:6a:1c:db:88:ca:
e3:c1:c8:49:4c:d8:aa:bc:1c:75:89:9e:e0:fb:55:89:1d:fc:
c8:85:60:3e:4b:76:50:38:64:8f:58:a4:ca:11:65:cf:47:19:
d1:0b:66:e4:c5:fa:69:84:b6:e0:c2:61:28:96:01:7e:43:18:
d8:80:9d:ec:c4:65:47:d8:e5:2d:6b:8d:a3:65:39:bc:48:bb:
1b:ae:be:dc:3f:fe:1b:2c:a9:a7:2c:1c:b8:02:4b:a2:1e:cd:
05:bd:66:e1:8a:ab:58:73:8b:a4:d8:68:17:43:42:f7:7d:6b:
72:49:b1:f1:a4:b3:e7:62:d0:b1:a2:80:5f:1f:05:54:ee:1f:
ee:6d:11:1c:61:82:b7:81:e7:e6:5f:2f:c9:96:62:c1:4f:63:
cf:d5:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:08 2025 by rpki-client