
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: Nsw3Ybmv7mtOVC3C5Y+H8OE1c9HrIKKbtwCwL3/fi8U=
Subject key identifier: 37:F9:42:8D:5C:D4:4E:2E:58:89:77:CE:AE:CB:C1:47:AA:D1:49:86
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019893A3D8D73F8F0DF0B3CA7AF414952964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 162C
Signing time: Sun 10 Aug 2025 11:00:45 +0000
Manifest this update: Sun 10 Aug 2025 11:00:45 +0000
Manifest next update: Mon 11 Aug 2025 11:00:45 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: grH4TXcrWERUF3kE6KBnNYxH0t1x892z7NBcQvWJyoo=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:d8:d7:3f:8f:0d:f0:b3:ca:7a:f4:14:95:29:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Aug 10 11:00:45 2025 GMT
Not After : Aug 11 11:00:45 2025 GMT
Subject: CN=37f9428d5cd44e2e588977ceaecbc147aad14986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:90:fe:e4:ab:2a:14:f7:01:45:25:fc:55:
8b:fe:f1:39:19:35:76:31:20:e6:83:14:f7:65:a5:
fc:27:9c:81:cc:aa:68:71:bb:b7:14:92:6b:ec:07:
a0:40:c1:07:ba:7f:1b:d5:c2:0b:fe:78:7d:b8:37:
d1:d8:2c:c0:67:56:34:f4:2e:f1:d8:2c:52:b6:87:
e1:f6:ed:47:84:7f:aa:9c:95:a2:de:6c:62:e7:52:
d2:c8:67:c6:82:ec:59:e7:4d:c8:1f:cc:14:b0:59:
23:ce:6b:50:ba:41:08:e9:c1:56:1d:d3:bb:1c:f7:
2a:a1:52:b0:dd:34:b2:f8:1f:e5:c9:25:b2:ba:2f:
f3:63:5d:46:7a:98:02:02:0a:dc:13:2c:17:b4:10:
83:e0:c6:05:a3:8e:1e:c0:8f:9d:00:b9:b7:06:52:
d7:57:87:8b:10:b9:30:60:b4:8a:56:6b:83:0b:ac:
e8:92:51:27:5c:82:bb:4b:65:cc:68:dd:b5:30:cb:
35:36:e6:5d:8d:53:8f:c9:13:60:f9:f2:41:16:c3:
4b:9b:ad:87:3c:04:9a:92:31:e2:af:95:47:ef:06:
85:a2:6f:de:c1:06:7e:5f:19:52:0b:d9:2f:8c:6a:
55:67:5b:ea:16:7f:cf:8b:9b:6c:50:f3:47:ca:19:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:42:8D:5C:D4:4E:2E:58:89:77:CE:AE:CB:C1:47:AA:D1:49:86
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:9a:f6:95:8f:22:dc:ae:5d:49:e3:c4:41:4e:8f:e8:cd:
78:c4:89:24:da:ae:d8:80:39:d4:d9:cb:12:f3:7c:2e:70:78:
85:cc:73:89:92:e0:28:78:5e:12:7b:bc:2d:7a:bf:f2:2d:c5:
ed:75:d8:f6:fd:a1:89:ea:7a:e7:01:cc:3a:85:f7:a5:6f:8a:
c5:1c:90:5e:5b:b5:4e:75:7f:0c:94:ae:3f:08:a9:e9:21:77:
12:f5:dc:48:c6:0c:f7:5d:15:89:7c:0c:14:70:5d:25:29:7b:
83:25:d0:bc:2f:49:1c:35:60:3b:bb:81:41:fa:d3:32:85:47:
73:14:b5:0c:ad:7c:a2:fe:75:1b:81:f0:47:6a:82:97:e0:d9:
51:aa:9b:1b:11:9f:42:ca:bc:ef:14:e1:f9:a9:75:91:ef:ef:
e6:27:66:4d:96:38:9e:87:12:36:49:66:be:82:ce:cf:3f:6c:
e5:d5:17:a4:dd:e9:13:fc:67:dd:92:cf:da:20:ed:76:6a:66:
77:6c:03:ce:8f:88:ff:35:78:bf:07:eb:16:50:4d:f2:a9:07:
3e:a6:73:5d:db:f4:d2:7a:16:04:1b:af:37:04:97:ba:47:76:
5a:61:1f:51:5f:fa:d2:63:3b:5f:cd:7f:93:39:b7:74:04:ef:
e3:07:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:09 2025 by rpki-client