Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: dgVsZruJY061e5n4yzjRArpl3h+Aw5o7Rpm9nR25dOE=
Subject key identifier: 52:EF:61:94:30:ED:24:AC:F4:79:86:FB:D0:A2:9E:C1:13:7A:20:D3
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0198D473A690EEB8B889994527E58DD628FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 1083
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: 7fXq09A3cm7WKZ3XzldBdn82pfu0HeH84uOG/1qWidE=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a6:90:ee:b8:b8:89:99:45:27:e5:8d:d6:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=52ef619430ed24acf47986fbd0a29ec1137a20d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:af:bb:76:e5:37:14:4a:e9:d1:fc:77:cd:
65:64:a2:48:c0:3b:47:06:80:34:67:ce:62:1e:1b:
e5:58:a1:db:74:9c:7a:ab:4a:72:a2:35:57:48:2c:
08:6b:fe:99:69:a7:bd:ce:7f:f9:4e:7c:da:cd:0f:
df:80:1f:5a:a5:41:0d:25:6d:8b:0d:c7:39:e3:24:
79:7a:d9:54:09:70:10:ff:0e:9c:de:20:a5:73:91:
10:ad:a2:6e:81:97:3c:01:45:6b:5d:28:2d:b3:94:
f8:dc:c1:5b:e9:f5:8e:83:41:5a:fe:c7:16:c6:ad:
ae:d6:0d:b4:5f:ce:2a:fe:72:02:9a:88:f0:8e:b4:
a8:7f:30:e2:fa:ae:7d:8c:78:3b:62:e2:06:5e:f0:
7b:b5:60:aa:88:4f:ec:34:0d:74:68:89:24:d1:5e:
70:9a:b2:32:a8:01:52:c1:95:ab:61:7d:94:a3:0d:
b0:8f:09:9e:99:3a:38:a0:85:e6:60:f0:b3:9a:7e:
82:4e:dc:b2:8a:79:86:9d:d8:08:e1:f5:e7:bf:81:
ee:0b:f1:66:2c:25:56:16:d4:eb:43:70:b6:70:04:
98:36:b9:fa:ac:2b:27:c1:a3:1e:b4:d4:8d:5d:b1:
17:a5:66:c4:2f:e5:36:46:f2:10:6c:98:49:18:ff:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:61:94:30:ED:24:AC:F4:79:86:FB:D0:A2:9E:C1:13:7A:20:D3
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:d9:fb:04:9a:13:75:59:72:99:81:e3:ec:84:c4:20:4f:
1f:27:aa:7f:0b:db:62:3f:65:54:fe:53:5f:b5:95:11:f3:20:
79:1c:c1:c5:09:d9:58:f9:88:ce:af:0c:ad:2a:9b:42:78:8a:
36:49:a6:97:e7:a9:87:d2:f0:5a:38:3d:bc:89:04:1d:03:08:
a7:f5:af:c3:3a:d6:03:15:ae:33:d7:b5:ca:07:a7:e5:ae:ad:
41:dc:93:0d:dd:78:5a:9e:5d:24:be:59:c4:6c:13:57:44:52:
e6:28:5c:5c:16:fe:0b:fb:c3:fb:5c:2b:27:41:b8:fd:76:40:
bc:e9:61:46:2c:dd:13:7e:85:21:09:80:2b:17:9d:29:3c:0f:
45:23:11:60:3e:91:50:3e:fa:df:07:4f:33:f2:44:aa:32:4f:
ca:18:e7:fb:d7:96:e1:7d:c9:03:5e:e7:fb:4d:fb:c9:12:b0:
fb:6c:b7:5e:5e:a2:7b:c3:9a:70:97:e8:6f:0b:10:13:73:f1:
cf:54:ec:66:7b:2f:96:bf:c1:ac:ee:b7:ea:b4:2e:8f:b0:8b:
55:7e:ad:fc:21:a0:fb:31:ad:fe:45:b8:ad:dc:dc:92:5e:03:
b2:5b:75:43:b9:67:d2:c1:b8:17:90:ef:d7:96:94:e9:c0:06:
79:ab:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:57 2025 by rpki-client