Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: z/g6iWb7nCCIyyTCfUcf3AhWUFRmx4LdK4Q3lhuDPF0=
Subject key identifier: D2:4A:F2:0B:14:01:7D:48:D6:6C:5D:3E:98:84:03:39:65:1E:6B:1F
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 0198D960462BA6E181DEB904B3F58B09B201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 1359
Signing time: Sun 24 Aug 2025 00:00:21 +0000
Manifest this update: Sun 24 Aug 2025 00:00:21 +0000
Manifest next update: Mon 25 Aug 2025 00:00:21 +0000
Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: X1itY3o40O/D8f/N5Jz3C+RlB6eaWlR/f6WVV2Sej0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:46:2b:a6:e1:81:de:b9:04:b3:f5:8b:09:b2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: Aug 24 00:00:21 2025 GMT
Not After : Aug 25 00:00:21 2025 GMT
Subject: CN=d24af20b14017d48d66c5d3e98840339651e6b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:12:ed:ba:fe:00:57:16:e3:3c:02:c2:e5:
19:05:98:4d:4a:ff:3f:f4:eb:64:bb:86:ce:a8:b1:
4b:2c:6a:fc:22:36:b6:ab:33:fe:ed:23:ca:f2:6a:
58:d2:f5:7a:e9:80:59:b6:ea:92:f5:79:50:ea:19:
37:27:93:2b:6d:60:44:62:5c:3a:51:d4:e7:d0:9e:
6d:3a:f7:2d:ba:5c:9e:fe:e2:23:88:73:bc:eb:36:
ad:4a:e0:39:66:b2:ab:67:c7:e8:f5:7e:6a:d2:fb:
5f:28:01:36:25:fb:9b:d3:1e:02:ac:5a:90:0c:35:
1a:63:69:b8:b5:ab:47:0d:cb:2d:ac:16:c3:35:97:
ea:9b:10:72:51:a8:95:d0:1e:74:49:0a:73:e6:29:
b3:48:a7:3b:12:39:b3:32:1f:01:d9:a2:a1:d7:ce:
ef:4a:9f:54:a4:c3:86:09:d1:e8:39:5c:73:06:7e:
e0:dd:0c:00:b7:b6:c3:bf:ff:95:87:69:e4:93:65:
c7:4c:97:09:f4:fc:f4:b5:0c:8e:97:6a:77:10:2d:
8c:f9:9e:cf:5f:7e:43:13:e8:1e:78:56:96:36:cf:
85:86:a1:24:54:11:70:70:97:9b:19:e0:61:88:2d:
93:60:b6:bf:39:e8:a2:06:3c:32:d7:da:70:ec:28:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:F2:0B:14:01:7D:48:D6:6C:5D:3E:98:84:03:39:65:1E:6B:1F
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:50:36:20:11:fd:b1:8e:1c:6e:02:4c:b7:6d:30:25:a2:c1:
48:63:41:ce:8b:82:1a:3b:80:52:f0:f9:90:d0:20:e7:17:b7:
09:55:2b:f4:51:2a:f2:f3:4b:bd:d4:48:2a:25:34:90:09:e2:
86:6b:7b:95:9d:d9:d2:0f:0e:b0:4f:07:25:9e:f4:88:19:22:
8a:e8:7a:2f:88:fc:11:ef:1b:54:bc:3f:cf:e2:af:ec:e2:a1:
47:8e:45:1a:8c:e1:5c:a6:e9:fa:a4:9d:3e:12:3a:96:3a:97:
7a:f3:d4:66:00:bd:ba:3e:a0:45:c3:3d:2e:8a:6b:df:19:55:
80:b4:5e:bb:05:dc:9f:0a:85:52:4b:56:17:5b:91:c4:97:c1:
fc:4c:42:e5:55:b8:16:04:93:df:bf:78:32:51:2e:c8:5e:27:
a8:af:6c:7b:d9:05:7d:68:e4:44:ba:4e:4b:45:5f:fe:6c:5a:
44:21:90:e3:18:0c:33:55:2e:15:42:f9:4e:97:49:e4:6e:b2:
cf:7d:53:0a:45:17:c7:80:4c:62:c7:ef:ad:f4:a3:b0:bf:de:
3d:78:ae:ba:dd:d2:33:26:fe:92:be:e3:d1:8d:9a:c5:48:49:
e5:4e:50:3b:b0:b3:7d:fa:57:7b:bc:ef:15:e1:1f:d4:17:5a:
a8:92:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:14:57 2025 by rpki-client