Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: 3MFpaql/sNOyOAhspL/qMm8cBeWUHEPtQ4q3ulTzp2I=
Subject key identifier: 14:1A:D8:5A:89:FD:8E:BB:DE:FF:A0:16:82:0D:BB:AB:4D:94:CE:1B
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 0198D5F131BE836A6ECEAF54FCA4DFC026CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1298
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: iwYZ2fquLuVeqFAWBfBjW5L2vvVBW0s3IfsOe7XaSFQ=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:31:be:83:6a:6e:ce:af:54:fc:a4:df:c0:26:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=141ad85a89fd8ebbdeffa016820dbbab4d94ce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:ce:46:6c:77:ff:f5:01:11:c3:8e:01:54:
aa:6c:ce:f6:f6:b3:0c:d0:62:f2:9f:4c:65:7e:98:
42:f6:75:12:af:c8:a3:08:b4:7b:3f:47:73:a9:1b:
81:b4:44:05:c9:d4:42:68:1f:ab:03:11:52:6a:2a:
13:87:30:56:de:83:b1:3d:4b:17:fe:95:70:00:22:
25:e9:92:53:57:4c:e7:4c:cb:e9:e1:7d:14:ff:b4:
a8:c8:90:9d:57:35:9a:cc:32:88:e6:fb:29:93:d7:
7d:db:b5:ec:3f:55:81:24:c5:e7:bf:b3:b2:be:57:
c5:ee:21:7b:2d:b0:7d:68:3e:f7:b0:46:bc:e0:ee:
9b:9e:f0:fc:8f:97:87:da:7d:b8:54:fe:6e:76:40:
9b:3d:12:9b:df:9e:26:6e:84:1b:0e:6e:3f:f0:16:
f5:b2:87:33:48:35:0e:50:0d:32:4e:a6:9c:96:95:
86:77:ee:bd:cb:97:53:e2:49:c7:50:c6:5f:48:c7:
00:17:6b:5f:79:b7:cc:cd:b9:09:4a:97:fe:35:23:
24:e2:30:da:49:34:28:2a:fa:0e:a6:bd:17:51:cc:
90:9f:7a:f5:95:fa:f2:0d:ee:02:ff:41:d4:25:cb:
23:ce:ce:5f:ad:d2:22:82:eb:67:a5:aa:a9:a3:9c:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:D8:5A:89:FD:8E:BB:DE:FF:A0:16:82:0D:BB:AB:4D:94:CE:1B
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:8e:43:85:5f:dc:ec:26:fd:a8:bc:13:06:d7:04:28:af:
10:6f:71:e5:31:55:c8:d0:a9:61:bb:fa:78:e0:a4:b7:c3:af:
d4:91:af:44:a0:8a:45:7c:52:01:e8:cb:ea:01:97:3e:02:df:
e6:0a:a4:de:a2:c8:6f:c0:9a:0a:10:a5:b5:16:fa:94:98:c8:
ef:8a:7f:99:5f:e1:4b:76:08:eb:31:02:44:5e:32:e3:f0:11:
bc:88:a2:ee:55:00:8c:81:63:0c:9d:2e:b6:a5:c1:36:3a:e0:
b0:21:8e:9e:1b:11:c6:b7:48:9d:52:28:ec:3a:bf:86:07:81:
0c:7c:cc:ba:02:64:21:39:26:82:0d:93:b2:b4:d6:43:32:c6:
90:9b:7a:8d:80:9f:85:e9:30:30:1f:58:ae:ec:88:a4:4a:d3:
0e:3b:b3:d7:2e:2b:d6:c9:c5:70:66:bb:61:e1:5e:e9:54:00:
52:34:48:85:4a:c3:5e:80:b0:a6:2a:4a:8f:bb:78:f8:7a:a2:
19:c6:0b:ae:44:31:9c:fd:56:39:85:37:ef:b8:21:99:c0:91:
b3:af:aa:62:35:c0:90:90:fc:eb:58:2e:78:16:6a:50:9b:31:
c8:fc:cd:ad:2d:a9:ae:4c:4b:fc:35:e9:20:b4:5c:00:ca:f8:
6d:cd:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:06 2025 by rpki-client