Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: 5M5vE6+2iHWUF8WNUHBIOcRsPNDFuT34mJziPjCjDJo=
Subject key identifier: 2C:EC:C9:71:D9:BC:2F:DB:68:8E:CD:FF:4E:C2:9A:BB:A0:C9:35:91
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0198729888BB9269D7D82CA19F8C62D38669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 129A
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: LW6fVwQsNsXwuoNWIL3fezFfWn77N41fLNM/377W4rA=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:88:bb:92:69:d7:d8:2c:a1:9f:8c:62:d3:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=2cecc971d9bc2fdb688ecdff4ec29abba0c93591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:68:53:d1:a8:eb:9b:00:3a:38:c0:ed:e5:
e6:4d:ef:ca:24:ad:4b:d1:39:7c:5b:0e:3c:3f:20:
6c:e7:81:5b:28:09:61:8b:b9:4a:be:3d:35:d0:4a:
37:5b:d3:25:e7:0a:95:71:4f:d4:f7:4c:06:dd:fe:
70:bb:c3:cc:5a:3e:d1:2f:40:18:e2:16:21:c5:72:
df:31:eb:94:56:86:e6:9c:9d:70:3e:99:7c:3b:c5:
9d:7f:17:1e:23:51:69:27:fb:b5:cb:57:16:06:9d:
df:fd:ae:41:a1:42:80:91:39:c8:7e:29:b4:90:ab:
e5:7a:d7:cb:31:5e:65:72:50:b7:48:8c:be:8c:b6:
b4:78:64:7a:2d:a2:1e:02:16:e2:a1:c9:25:1c:f9:
86:f4:91:cf:c8:ac:29:74:16:f1:6f:2b:31:4b:63:
29:37:4f:51:8a:85:9c:a3:d7:eb:10:e1:29:04:dc:
68:ee:bd:7a:bc:3c:84:b0:e5:2d:3d:3e:0d:0c:59:
f4:22:d9:78:a6:48:41:5e:a0:61:f7:74:32:c3:e9:
65:55:ad:ea:eb:cc:b8:e0:a8:95:30:15:ec:84:f7:
58:62:eb:33:8c:d5:c9:12:ab:d4:0b:0e:ba:44:72:
69:8b:0a:b3:d7:a9:50:3e:fb:b3:c9:55:c4:29:aa:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:C9:71:D9:BC:2F:DB:68:8E:CD:FF:4E:C2:9A:BB:A0:C9:35:91
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:67:6f:78:7f:6a:f2:1f:56:50:4c:c1:8c:d3:af:cc:d3:43:
b2:57:46:90:7f:d4:83:8b:c8:47:56:70:91:9d:2a:ce:e6:61:
e2:11:a8:e6:d0:2f:0a:4d:35:11:5a:2d:3c:65:48:44:35:04:
92:f9:50:d8:37:10:7c:b9:1e:d3:a5:1f:5f:32:9c:89:4e:d5:
4b:32:4e:e0:bb:1e:6a:a5:b9:4f:b9:12:8e:97:21:e3:e7:fd:
4c:dc:8a:1d:2c:d8:30:17:64:c9:ea:be:b8:5e:c5:22:1d:9a:
c7:4f:62:6b:4c:3a:bf:12:bf:17:6d:28:f5:cd:b9:9b:8f:3c:
42:52:6f:22:c1:2b:a9:a2:43:52:1f:e1:9a:cf:48:8d:d1:48:
d3:4d:ab:21:18:54:b5:db:e3:ed:30:6d:2b:ff:ab:96:76:6c:
9b:84:89:cd:16:e7:a0:ee:a9:48:8c:7d:81:22:ba:69:c6:42:
d7:4e:82:22:9a:28:12:d5:b7:71:d5:77:20:86:af:ff:1d:19:
57:91:8f:40:22:54:9c:07:39:04:66:13:a1:f7:d6:fd:6e:da:
9a:39:60:02:85:e5:62:6f:5b:3f:f4:17:c6:31:bf:b2:b0:57:
7f:ff:dc:24:ab:9f:97:0a:75:5a:de:27:be:52:ec:96:8a:c7:
bd:00:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:33 2025 by rpki-client