Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: s9yHW1aROMy0tZcT6GT0hyGSZ/OCoL9utOnO/iWGKVE=
Subject key identifier: C6:63:9B:CE:D8:9F:00:20:03:2B:CA:34:41:35:1E:D8:9E:EA:2E:CA
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0198D7739EBAA2884B332B2B9D44C3D6286E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0C6A
Signing time: Sat 23 Aug 2025 15:02:15 +0000
Manifest this update: Sat 23 Aug 2025 15:02:15 +0000
Manifest next update: Sun 24 Aug 2025 15:02:15 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: kr1Z8yfQ9tbpecW2T75nHnFjs7mRp2AdYuHEU0EKdVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9e:ba:a2:88:4b:33:2b:2b:9d:44:c3:d6:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Aug 23 15:02:15 2025 GMT
Not After : Aug 24 15:02:15 2025 GMT
Subject: CN=c6639bced89f0020032bca3441351ed89eea2eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:2b:b3:dc:92:47:57:9b:69:dc:89:64:d5:
6b:7b:c7:ed:86:ad:ad:00:a5:23:80:23:6e:42:ce:
92:b0:15:3c:c4:a1:80:d8:32:c4:98:26:05:98:d9:
55:0e:a6:2f:17:ee:68:69:99:b4:43:94:e6:ed:c0:
3a:aa:de:99:02:7e:f3:7f:17:35:89:b7:5c:ea:7d:
5e:c7:e8:0a:32:7d:93:23:3f:4d:4a:d0:af:92:b1:
a0:4f:96:ee:51:14:f4:d3:28:85:f6:98:c9:50:f9:
93:ef:81:77:a2:bc:03:f7:49:52:82:c4:b3:58:a4:
c0:08:28:12:c0:9c:c1:5f:56:fc:36:e4:f8:48:d5:
73:a0:36:9e:42:bb:b2:f5:0d:b4:bd:6b:e1:9c:f9:
85:dd:3e:47:fe:7a:90:d4:e1:b5:c4:69:cc:fd:08:
d3:f1:34:00:15:28:cf:d1:86:c1:7b:58:34:5e:e1:
d8:b5:f1:ee:f4:78:07:a7:ee:ed:79:d4:b3:cf:20:
a8:01:f5:ed:db:60:6f:e3:e1:83:aa:1b:a8:f1:8d:
77:aa:2c:7b:e2:37:e5:66:e7:18:02:78:2d:12:ad:
14:a5:50:29:ff:35:42:d5:b9:2a:b0:86:bd:8f:59:
e3:45:e4:72:9a:2e:79:b8:5f:1f:2f:c0:9c:a0:60:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:9B:CE:D8:9F:00:20:03:2B:CA:34:41:35:1E:D8:9E:EA:2E:CA
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:65:eb:2e:e5:f8:0a:e0:ef:a8:82:2d:09:39:1e:5f:5d:31:
49:11:9a:1a:52:8d:14:9c:6b:1c:45:3c:c0:c1:ff:22:2d:fd:
74:fd:90:81:b8:0f:46:34:00:08:7d:55:99:c9:3b:43:e2:5a:
7e:41:e3:d5:c7:f6:b8:49:94:98:8b:9a:ec:e8:76:01:75:3a:
48:70:ed:92:b4:5b:7a:3c:ae:a1:79:c1:c2:b1:43:b0:b0:bc:
46:ad:2f:9f:48:78:de:05:f2:a2:ca:0d:5e:ee:2c:ed:4f:a7:
a3:56:19:c9:f3:d3:9c:c8:65:29:30:c6:9f:da:c7:09:a6:8c:
08:41:2e:1a:28:86:5e:b1:ea:6c:d7:72:77:da:b8:89:8d:a6:
54:b2:5f:ea:04:75:df:a2:78:a7:bc:93:46:3a:56:f0:e1:41:
58:07:81:8f:60:b9:03:72:2e:11:6d:51:b4:04:aa:7a:c0:1b:
2f:06:a3:76:ad:fc:3f:33:0d:3d:3d:0b:53:16:04:db:65:d1:
76:cf:c2:31:96:47:72:36:d2:e1:8f:f6:de:7d:0e:51:fa:c1:
8a:fe:97:05:09:d2:be:5c:62:b5:ce:54:17:c8:a3:47:16:8d:
b2:f3:ea:fc:ff:6c:d5:25:b6:4d:ba:50:41:8c:c1:25:a9:7e:
78:20:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:17 2025 by rpki-client