
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: IVIpU3v9Yunc2TmA6tXoULPwV/Gb56DONLXznx3lfFQ=
Subject key identifier: 62:79:3F:52:4C:9B:1B:E9:A6:2F:9B:EA:30:FE:F6:AB:4B:FC:36:0C
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 01988A32DF83B6CDED207339F697455A9E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 0FA1
Signing time: Fri 08 Aug 2025 15:00:46 +0000
Manifest this update: Fri 08 Aug 2025 15:00:46 +0000
Manifest next update: Sat 09 Aug 2025 15:00:46 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: jeEQqBVfIxCVZFYrZyKM0DyqkD0YYEjcr0rAqwRmNrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:df:83:b6:cd:ed:20:73:39:f6:97:45:5a:9e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Aug 8 15:00:46 2025 GMT
Not After : Aug 9 15:00:46 2025 GMT
Subject: CN=62793f524c9b1be9a62f9bea30fef6ab4bfc360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:58:96:b5:01:ea:9e:50:db:65:29:79:bd:
1a:cd:be:a5:ef:29:4a:88:7a:ad:fb:fa:e1:c7:e1:
32:fa:20:11:3d:38:0d:ce:63:d1:3a:32:a0:55:60:
06:6e:00:19:3c:19:c0:da:ef:05:ab:e2:20:b8:bf:
2c:3f:84:77:e4:d2:81:50:99:74:50:14:57:4b:67:
96:5e:d9:66:fe:f9:df:86:ad:d0:45:88:e4:58:d8:
f7:75:32:9a:f4:27:e8:dc:46:df:f4:d3:8b:ef:df:
46:9a:08:c3:f0:64:cd:22:b6:45:2c:25:b0:f5:1a:
c3:c1:cc:a4:2f:a4:7c:2a:da:6f:f2:d4:a8:54:0b:
c5:01:fc:1f:f6:1e:26:76:37:58:df:98:a0:1d:69:
bd:9f:19:7c:45:7a:5c:23:55:52:18:e8:0e:e0:61:
1b:24:bd:85:f9:6b:6b:a1:f4:4a:55:eb:f7:23:73:
91:02:83:47:7c:1d:a2:53:7d:2b:01:66:f9:4a:4a:
32:a7:62:f5:3c:54:fe:d1:d5:cf:d2:9b:bf:c8:70:
e6:a8:3e:97:fa:be:e4:f9:e9:d3:36:47:2a:52:b6:
2e:aa:60:67:71:12:73:c3:56:9f:e6:e2:0e:aa:cf:
84:5c:3b:83:7c:35:bf:98:84:41:14:55:75:0b:52:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:3F:52:4C:9B:1B:E9:A6:2F:9B:EA:30:FE:F6:AB:4B:FC:36:0C
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:8f:63:03:96:7a:96:7a:5c:19:0d:68:11:a3:74:e9:a0:
8f:85:01:29:1f:46:5c:33:e6:58:b2:da:9b:d5:df:ac:40:94:
05:ae:91:17:d5:fa:92:06:27:6e:d7:69:43:6a:bd:e1:40:60:
ee:a2:8e:a8:9d:8c:5b:38:94:a6:e0:ed:49:06:6f:85:f4:e8:
6e:42:63:ea:c1:ee:8a:d4:a7:82:cd:65:40:5b:8c:4e:9d:56:
64:16:e2:cf:3f:8f:5d:6f:06:c5:64:f6:c2:62:3d:ae:67:34:
a8:a3:60:2c:24:28:47:da:dd:f1:c9:6c:d8:7a:61:14:5b:eb:
ec:06:fb:2a:ef:9e:12:3c:6b:df:91:a3:06:ba:e8:96:9d:26:
db:4d:00:67:e2:f2:22:36:eb:0a:d0:6c:01:36:2e:1e:52:52:
80:a7:f8:af:9a:75:93:a3:e5:9c:70:52:d4:4c:2c:c5:71:f5:
46:99:c7:2e:20:ef:56:9a:e4:73:b3:aa:86:be:f3:88:91:cf:
b2:c2:c0:d4:a9:e3:e8:e5:af:72:4a:ee:19:a5:c3:5e:a8:7e:
93:ec:e1:12:ee:a3:68:f2:e6:24:9f:49:b8:0d:1f:2d:93:ef:
6c:10:70:50:01:a1:06:51:04:f2:1d:6e:a9:06:1c:d3:2c:d9:
6c:6f:8b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:13 2025 by rpki-client