Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: ZPmyatQqdbVVn9GH2Nl/jms4Ipk78Wui61Zq1sVcD9E=
Subject key identifier: DF:83:F4:0A:77:51:5D:50:80:F2:31:13:FA:49:D7:D4:C2:7F:3C:A6
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 0198D4A8336D2A00BAE30EAE0B7B40F6CBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: mxPf6jX6ALtOsjm6lRdooDw72AjO20VKL1giIrzigKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:33:6d:2a:00:ba:e3:0e:ae:0b:7b:40:f6:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=df83f40a77515d5080f23113fa49d7d4c27f3ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:12:56:46:ea:a3:f7:11:70:a6:20:70:1b:
48:13:2e:34:8d:47:f9:97:41:b3:87:fc:cd:fd:34:
82:48:48:c2:9c:80:fe:2b:90:fe:2f:f3:ac:42:0d:
c5:85:10:48:3f:fc:cb:81:11:7e:58:cc:2a:7d:c1:
fd:d6:8a:63:58:ff:5e:67:e8:11:18:0e:4d:93:b7:
c8:6b:70:6a:35:55:42:be:32:1e:89:ee:28:26:03:
66:f2:b9:86:90:de:db:45:ab:23:3b:29:71:e5:9d:
77:46:bb:07:91:92:4a:34:22:42:26:a2:6a:46:7b:
ac:4b:51:e9:02:81:b8:f3:93:b8:12:81:1a:ad:9c:
66:53:64:06:29:a3:8a:b3:2f:63:07:b8:83:16:06:
f8:31:78:5b:52:c1:37:2f:a5:29:03:b3:94:af:32:
aa:ae:6f:77:78:2f:c3:17:9f:4e:79:9f:51:a6:4f:
0f:89:50:e7:65:5d:d4:7a:53:7d:93:22:d9:12:38:
b3:c5:ae:eb:dc:e0:cc:99:0e:76:22:e8:ae:6d:9b:
3f:95:cd:e1:8d:57:da:25:c5:bc:e5:a2:0f:12:e6:
af:91:2b:cb:69:61:09:55:45:c9:38:25:8c:e7:d0:
00:dc:d1:b1:f7:1e:be:e3:b2:8a:58:1f:d3:b8:63:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:83:F4:0A:77:51:5D:50:80:F2:31:13:FA:49:D7:D4:C2:7F:3C:A6
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:1b:c9:0f:4b:7c:77:c3:01:f1:f3:4c:5b:20:cf:e8:37:
41:c3:08:e8:86:06:be:81:22:71:28:f4:92:fb:e6:90:5c:af:
a3:43:b0:f4:36:da:50:80:fd:4c:7e:26:0c:8f:84:30:de:32:
ff:40:ef:3b:d5:70:ea:76:c7:ee:8e:7e:b4:61:4e:77:ad:b9:
32:e0:57:be:e3:d2:08:52:c9:fd:4f:2f:a7:a5:60:6b:37:33:
ba:0b:81:e6:c8:32:5c:0e:18:6f:18:7e:5b:b9:e8:cf:e1:1f:
5d:99:8f:e6:6a:a2:70:72:eb:e1:63:f7:d5:7f:00:74:41:45:
5c:14:e7:84:4f:17:29:9f:50:8c:e1:05:40:34:ce:5e:15:12:
7a:c7:0f:7c:48:30:a3:30:39:ba:92:e0:5f:43:90:ca:51:0c:
3c:e6:7e:72:e5:ff:41:63:3b:5a:b1:64:db:e3:62:a0:6d:42:
ab:78:c4:b2:1a:f8:86:b9:02:f0:31:ea:05:bb:08:fb:04:14:
4d:c4:51:92:52:0c:e4:7f:c6:be:ea:96:7b:98:91:47:f4:7a:
92:6d:a4:08:73:ea:67:6b:49:6a:75:5c:46:d1:31:07:4a:8d:
f6:59:c0:ab:b4:95:71:67:36:44:fe:fb:8f:c7:71:f8:cd:49:
95:c8:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:42 2025 by rpki-client