Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: 9P12MIXkwb7SeT+EGPHHh9nJBPbVyLHZRcdjNh+lcd0=
Subject key identifier: 0D:DC:9C:07:6B:AA:CD:B6:27:33:4D:97:7E:C4:78:5B:EB:78:52:D8
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 0198D4E0D45FA8D130DD8D08D02615ABEB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 0482
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: QSHVzNX7eo/ZeNZUexB+DaZyKOB7oYSuFG7bQ/t0E24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d4:5f:a8:d1:30:dd:8d:08:d0:26:15:ab:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=0ddc9c076baacdb627334d977ec4785beb7852d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:bc:42:3e:76:3d:39:02:23:93:90:c5:a0:
49:a2:ee:4c:d1:85:0d:30:c5:8f:d1:43:87:b3:2b:
73:df:0e:fb:f1:14:cd:e1:82:59:5a:ec:fd:fc:17:
c3:ba:0b:4a:b5:fb:96:ac:bd:00:67:6c:f1:88:80:
02:9b:3c:7b:98:e6:17:3e:1d:2d:2f:a1:69:4f:ba:
f3:0a:5b:53:f2:b5:33:7d:91:7f:13:4e:a3:b3:ae:
21:f4:d9:ce:8c:9d:64:89:f2:4d:a5:58:fd:a2:b3:
c7:c1:df:65:53:8b:01:ed:ac:a8:b1:ee:77:0b:72:
d2:cf:20:34:8e:97:cd:a0:7a:f4:7a:00:32:8c:18:
0a:f1:12:92:d6:c7:c1:09:7d:da:fa:c5:91:45:78:
f1:ef:77:15:e4:8b:16:8d:18:1a:88:79:72:6e:68:
af:8b:35:f7:8f:de:a7:8d:16:dc:31:ef:f0:43:ce:
45:16:3f:23:ff:3b:a2:4e:ff:fb:f8:86:9a:e2:87:
74:89:9b:e0:e7:7b:c1:39:cb:b4:84:14:e1:4d:e8:
30:b6:b9:b2:e1:d4:72:7a:95:45:7f:6b:af:1d:03:
51:19:a7:de:2d:59:50:2b:c5:8a:83:0e:c1:fc:5d:
86:9d:8f:e3:5a:aa:b3:c3:da:1f:9b:87:c9:27:bb:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:9C:07:6B:AA:CD:B6:27:33:4D:97:7E:C4:78:5B:EB:78:52:D8
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:af:e0:30:1b:05:70:8c:fe:87:35:5f:87:d6:da:42:e0:
c8:ce:b8:07:8d:9d:24:1b:3d:be:89:1c:aa:6a:55:04:91:55:
32:80:af:17:cc:ea:3b:ba:48:fc:a0:34:9d:f4:71:ef:5b:9f:
1e:24:d6:98:14:fb:c2:41:42:16:a6:cf:22:5f:54:c3:41:bd:
7b:0c:0a:fe:28:9f:f7:31:45:ce:fe:42:fa:40:0c:ff:41:4f:
8e:42:94:d6:35:a8:c7:c3:12:01:30:2d:a7:b7:d4:e7:18:b6:
45:47:1d:e8:20:ec:38:68:9b:d7:c0:c9:34:c0:6b:4d:75:90:
0d:fd:aa:58:9e:1e:09:48:6f:13:21:ff:b4:ab:6f:e2:37:b1:
fc:d2:95:b9:9b:c3:f5:86:5f:01:90:e3:37:ad:39:20:d7:b9:
38:9c:a3:9f:22:69:4b:80:67:fe:dc:a1:2c:e8:be:ef:ef:00:
e9:5f:d4:ec:64:5f:c6:61:df:49:85:95:f6:e0:de:dd:c6:fc:
d9:eb:d6:e5:ab:61:04:77:3a:5c:52:27:14:30:ff:38:ee:76:
b5:34:2b:3e:6f:37:a6:db:45:d9:40:98:0b:8b:b8:d9:75:e9:
2a:27:fb:27:91:93:9e:e3:9d:94:18:38:28:d9:f4:4b:7e:48:
b8:75:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:02 2025 by rpki-client