Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: V+XURQUGf7b/KAwGInFR0SjtKjVSbs7jNtzvDyzxNKM=
Subject key identifier: BB:DD:0D:5B:46:43:2F:4A:61:E0:E0:90:AD:D0:62:07:CE:C9:A4:09
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 0197CC834B212063B135E7269D130FB810BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 19:00:45 +0000
Manifest this update: Wed 02 Jul 2025 19:00:45 +0000
Manifest next update: Thu 03 Jul 2025 19:00:45 +0000
Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: PV3KqHr/ErcRO2PUvmPGCSVcL4KRYve/P7yaoC9iYMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:4b:21:20:63:b1:35:e7:26:9d:13:0f:b8:10:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jul 2 19:00:45 2025 GMT
Not After : Jul 3 19:00:45 2025 GMT
Subject: CN=bbdd0d5b46432f4a61e0e090add06207cec9a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:5d:0e:ed:4c:f2:37:7b:80:8e:1d:a7:7a:
e4:db:4f:88:c6:26:99:0c:e6:c7:58:b7:10:72:9b:
12:e5:c3:90:a8:90:6e:32:d0:e3:49:54:34:4b:fa:
25:8e:de:f3:4b:8f:a5:6a:d2:9b:b9:6e:5d:f3:0b:
0c:ab:83:b6:39:d7:8b:a7:e1:44:3c:06:97:61:59:
56:eb:e8:d1:e4:64:d9:94:42:23:28:4f:9d:53:77:
90:04:31:a7:22:8d:67:5b:30:7d:58:77:74:31:05:
34:52:cf:cf:1f:48:a6:80:fa:44:01:36:5e:56:24:
86:79:d3:d4:57:cb:02:02:f8:68:47:af:c6:d9:4f:
6a:c2:b3:38:b5:da:de:1e:03:b5:e2:c8:6e:86:e4:
7a:59:ea:26:b1:d5:9b:8c:13:a1:d2:51:98:58:93:
76:63:ff:d0:46:0d:1e:33:81:f6:67:70:75:b3:71:
3e:84:27:7b:14:3e:b6:1a:af:29:4d:6d:2d:26:a6:
3c:10:40:b0:66:63:aa:82:95:3b:e2:b6:bc:3f:d9:
c3:42:15:11:b4:69:bd:4c:40:02:43:8b:8b:7b:29:
3f:33:23:6a:4d:84:82:b5:f3:a0:81:fd:59:77:38:
28:2a:a3:75:96:84:bb:5c:5b:9a:5a:9b:51:7e:18:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:0D:5B:46:43:2F:4A:61:E0:E0:90:AD:D0:62:07:CE:C9:A4:09
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b4:03:93:e7:ec:10:71:3b:08:b9:5a:be:80:44:e9:81:59:
80:16:59:25:fd:b7:2d:c6:3b:26:29:02:b0:dd:ad:2b:62:48:
f0:ac:11:4a:26:f3:21:da:22:14:92:a9:2b:f5:78:e1:f5:a2:
98:c8:fe:5e:16:7f:38:68:f5:ec:dd:35:d0:5d:44:d8:cf:60:
98:ab:c7:64:13:d0:19:32:12:56:3f:41:a6:59:c6:18:92:99:
cb:ef:8c:fc:61:7d:da:67:0d:38:6b:7b:b5:7b:8a:1a:3e:c5:
29:6c:77:c7:bc:da:31:68:0c:be:c0:54:02:12:c9:7e:bb:70:
00:56:6e:71:3a:ba:5f:10:df:af:40:f5:e6:62:0e:36:95:6e:
3b:c8:b6:76:d3:51:75:af:63:45:81:44:01:8c:21:29:22:58:
c8:67:5a:67:dc:60:a3:8a:88:29:61:70:50:36:95:4a:7a:30:
0f:ff:bd:7b:80:d7:77:47:c8:54:fb:f0:ab:ba:b5:02:4f:c7:
30:7f:39:80:66:8d:0c:bc:59:cd:f1:94:0a:ac:f8:e5:6b:55:
a7:40:7f:7a:2b:51:8d:3b:81:8a:2e:63:77:a1:0b:6c:61:e4:
61:7e:c6:bd:53:e6:d0:f0:0c:b4:30:0f:32:9e:39:4c:6f:20:
73:06:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:19:10 2025 by rpki-client