Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: BnonNOeYXpaUpAQw9P1SphSBt0EQ/BAj1sMbeuPSVdw=
Subject key identifier: B0:60:0F:E9:F2:FA:0A:8C:C1:55:43:EC:47:C2:59:E1:E2:E3:53:7E
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 0199FDDA65094344A887D421DE35244FCA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 08E0
Signing time: Sun 19 Oct 2025 19:02:52 +0000
Manifest this update: Sun 19 Oct 2025 19:02:52 +0000
Manifest next update: Mon 20 Oct 2025 19:02:52 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: zZFO4mrC8SMt8TFNxUoVG39q5N0VB8qvQVyAYv1SDBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:65:09:43:44:a8:87:d4:21:de:35:24:4f:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Oct 19 19:02:52 2025 GMT
Not After : Oct 20 19:02:52 2025 GMT
Subject: CN=b0600fe9f2fa0a8cc15543ec47c259e1e2e3537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:2f:4f:44:69:f6:96:7d:55:29:df:e4:eb:
56:b7:cf:fb:5a:58:d4:6e:04:48:9c:b4:b6:0e:fe:
d2:e6:82:83:54:ba:41:0d:3f:60:f7:83:4c:14:7b:
6f:15:e9:80:84:1e:fe:1c:f8:c7:67:03:4f:a2:20:
88:16:e6:c5:ed:cc:79:71:dc:23:db:2f:74:48:aa:
e1:d2:ce:46:7c:e4:b6:8c:a1:7a:2b:15:33:35:0e:
43:11:eb:59:f4:68:01:41:51:5e:c6:f8:e1:0d:49:
51:65:49:78:72:aa:b7:ae:a2:07:ad:8f:03:49:80:
8f:d4:ef:28:51:dd:c6:12:f3:1c:7f:42:03:3e:c5:
6b:7c:09:62:49:05:9f:14:70:44:7c:d3:6f:3b:b5:
10:e2:df:3d:4e:a1:32:20:7d:1a:0e:6d:64:10:c7:
14:a2:9b:0f:a9:7b:36:ea:58:e1:ca:af:e4:65:83:
07:9f:e3:16:4f:30:ef:d6:91:92:95:0d:de:d4:61:
32:29:11:dd:e7:58:36:01:b0:22:64:c5:2a:69:13:
b5:9e:b5:4b:11:b3:b3:27:82:b5:aa:00:db:1c:98:
9b:7e:cb:d4:94:ab:3f:50:15:40:b3:5f:56:33:54:
75:23:5d:7f:e6:5b:cf:e9:9c:da:75:76:b7:53:39:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:0F:E9:F2:FA:0A:8C:C1:55:43:EC:47:C2:59:E1:E2:E3:53:7E
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:98:35:ca:69:ab:ac:a3:35:bd:bf:6e:a1:b4:69:1f:78:
cf:4e:68:8c:ac:bc:82:87:05:47:12:10:7d:00:d4:a4:23:31:
ba:f9:a8:46:9e:5e:34:56:11:d6:cb:ff:bf:ff:04:80:d3:24:
da:46:12:88:a9:5a:39:58:65:ae:a4:9e:35:97:a5:b6:18:98:
c0:45:69:13:55:44:5b:4d:83:f6:4b:39:9d:e3:b5:f1:94:58:
dd:c7:fc:77:6b:2d:be:38:12:ae:85:d3:e8:d2:c3:81:d3:2d:
0b:9e:ae:6f:4d:da:3f:ee:e9:2b:61:e4:ec:91:4a:88:c3:36:
8d:a7:d8:5c:76:69:48:28:c6:6a:20:09:94:25:1a:e2:53:7b:
9a:9d:70:67:b6:d4:0d:cf:eb:44:3c:0a:8d:f9:49:1c:7d:b2:
af:32:22:6c:8f:72:8a:f3:64:5f:5e:13:ae:76:92:5e:e6:c8:
81:0d:54:60:0f:32:ee:a3:5c:05:8f:23:5b:41:d7:62:25:f0:
ac:50:ac:6e:55:bc:65:b4:27:ef:88:d8:1a:52:4e:d8:ab:5f:
80:c2:2c:20:b3:63:c2:53:8e:2a:01:6a:c1:a8:ea:f7:9b:a9:
d3:21:00:df:1a:16:d5:55:f3:f7:c7:93:f5:15:7f:1e:29:4a:
b3:21:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:45 2025 by rpki-client