Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: vkxS0TsFbOT51/2cktThCxJcchGeSg4uPcQ3ZYLFTKM=
Subject key identifier: 1E:73:11:37:FD:7F:44:76:98:8E:D4:18:FC:49:E0:3A:E7:A7:D6:6F
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 0198D73B2E5E61FC10B26006D2870CBCC985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 14:00:36 +0000
Manifest this update: Sat 23 Aug 2025 14:00:36 +0000
Manifest next update: Sun 24 Aug 2025 14:00:36 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: 9pj31NJFCR2cczSEKlHCIa/IR9BGFo6uyx93SAmribE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:2e:5e:61:fc:10:b2:60:06:d2:87:0c:bc:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Aug 23 14:00:36 2025 GMT
Not After : Aug 24 14:00:36 2025 GMT
Subject: CN=1e731137fd7f4476988ed418fc49e03ae7a7d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:b7:7f:4b:8e:1f:68:26:2a:ad:ba:76:83:
84:e2:c8:d0:1a:b8:8c:87:1d:4d:70:eb:ea:44:01:
14:70:a1:20:51:98:23:2e:1d:63:b4:31:16:68:74:
4b:e1:03:f5:75:1e:12:72:69:84:88:09:b4:69:d7:
8d:cd:38:3a:67:b2:9b:5a:c1:1a:8e:f0:e9:52:7a:
28:2c:42:41:62:3f:4a:d0:dd:26:4b:b2:be:87:74:
07:8d:8e:04:d5:a6:b0:e5:2f:ba:fa:79:38:eb:8b:
98:3e:de:c5:4e:f8:1c:62:cc:db:4f:74:a4:6e:98:
eb:b5:40:bd:38:bf:95:3c:bf:71:3c:e2:46:e9:e3:
6d:0f:84:1f:47:13:57:69:97:46:b6:a4:42:8d:71:
42:25:51:41:6a:23:da:29:34:41:c7:6d:e5:dd:bb:
6c:66:a4:6a:a7:6a:a0:7b:ef:55:ea:e9:09:f9:0c:
67:fa:db:7f:52:9f:27:24:99:1e:a5:9e:ee:c8:b6:
5b:5e:02:24:32:55:fc:78:bd:04:8d:4a:90:77:d0:
a6:e5:c1:ab:40:77:a3:eb:c6:16:0f:1d:5c:92:2d:
d1:d1:d0:f5:43:43:3d:e3:67:80:12:d8:d2:69:3e:
60:86:a8:6f:7a:1d:aa:d9:2a:26:2f:e4:e4:11:72:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:11:37:FD:7F:44:76:98:8E:D4:18:FC:49:E0:3A:E7:A7:D6:6F
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3f:a2:6b:52:3d:d0:89:de:4c:36:90:62:5c:9c:c2:3e:db:
73:3b:90:0a:f8:ed:83:ac:6b:9b:96:a1:40:9d:f6:ff:b6:c6:
fb:93:13:e3:aa:e3:f5:2e:8b:24:d2:f4:67:22:a8:63:e1:fa:
33:6c:ee:68:92:12:b4:1c:64:ae:13:03:91:52:b5:15:e2:44:
10:17:e6:18:a6:c0:25:92:79:ea:eb:a3:c2:ad:c3:6d:47:87:
64:51:b1:d4:ad:da:f4:80:b8:a2:16:46:5f:c9:cc:40:a4:7a:
d7:07:7f:ee:81:a5:73:33:21:65:84:cb:28:a4:c8:9b:d4:1d:
29:15:65:ff:0d:ab:9e:32:ba:0b:f8:ba:8a:51:7a:d2:d2:63:
7b:54:57:7a:90:36:57:ed:d7:3c:e3:a4:0c:64:a6:c2:45:57:
44:a0:33:45:16:54:8f:48:03:8a:df:5f:39:a1:ca:64:73:65:
c1:a2:26:00:3a:9b:b9:05:f9:54:20:97:2b:6d:1f:bb:59:74:
6b:0d:6e:96:8c:fa:84:37:80:b6:2a:df:cb:3c:32:75:de:2d:
22:9b:e8:0c:8a:b5:71:90:db:2e:b1:ad:55:e1:06:fc:27:4f:
e6:59:e8:7e:4a:24:af:89:ac:e6:6b:a2:84:93:38:78:60:b9:
25:b4:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:36 2025 by rpki-client