Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: yq62br/+r9At8nWt/mfD5rDbpG1ertyX12FcUpL1JLs=
Subject key identifier: D2:39:6C:47:F8:23:63:AF:A1:AB:94:94:C8:E3:EB:91:4B:3D:E7:D2
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 0198D4DFC98EBCA82505B2382FFD543D42D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: /odPIJN7Jji0GIwOJx8TuTfULQDPZDqXzQ6PCeDuXgc=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:c9:8e:bc:a8:25:05:b2:38:2f:fd:54:3d:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=d2396c47f82363afa1ab9494c8e3eb914b3de7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:0d:18:bd:7f:ef:18:a2:48:04:97:70:10:
e2:a2:d2:1b:e0:dd:4b:96:31:57:a8:17:d3:97:bd:
7d:60:c5:65:b3:b5:84:f2:a6:7d:e3:b8:5b:ea:19:
0d:2c:6d:78:b3:45:a4:70:10:a1:ee:dc:74:08:6b:
b3:99:74:72:78:b3:a1:34:7d:b9:24:d1:85:ce:dd:
3d:c8:71:34:a2:60:d3:80:05:c4:23:e8:2c:6a:a9:
5b:62:4b:37:49:18:c3:e9:ca:92:e0:14:20:44:cc:
cf:28:fb:da:fd:c1:d6:61:59:bd:ca:17:8d:c6:62:
dc:ef:3f:65:98:72:4e:4d:7b:f1:d0:21:ef:7a:2c:
19:3e:f3:14:87:aa:1c:6b:e8:73:6e:c8:87:80:5a:
71:80:71:3c:30:1d:fc:b7:66:56:04:cd:b7:81:21:
9c:42:c8:c1:9b:97:a8:2f:d3:2e:f8:c5:f8:13:95:
99:6d:81:b4:a0:7e:ce:9f:72:00:59:4f:1e:4b:07:
ca:d3:78:5d:33:2a:b8:4b:a4:6f:84:82:62:d9:c9:
d8:a3:e0:2f:a7:30:ce:66:0c:ca:2c:bd:fa:25:af:
bf:e6:6f:2b:dd:9e:07:54:4e:bc:bc:86:f0:87:62:
7d:b8:79:92:c5:1a:91:87:f5:d5:58:6a:7a:0b:41:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:6C:47:F8:23:63:AF:A1:AB:94:94:C8:E3:EB:91:4B:3D:E7:D2
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c3:e7:0f:a9:1e:cb:f9:26:20:13:03:6a:bf:c1:b3:23:99:
c2:e0:56:e8:05:9e:23:da:3f:57:a4:a7:8f:fe:26:5a:2e:a8:
8b:f3:31:69:bf:35:d2:a0:bd:89:b7:1b:3d:fe:3f:a6:71:3a:
58:35:66:d1:13:d9:ad:8b:d4:03:e9:5a:07:2f:17:c0:21:a6:
b2:29:48:76:81:4c:6f:2f:1d:35:3a:55:0a:fb:56:a6:76:65:
e5:bc:30:8c:89:37:a4:f2:e3:af:76:63:a5:89:1a:d9:23:e9:
c3:d2:aa:43:cc:7b:45:ca:81:e5:ef:fc:7e:5d:b2:df:57:fa:
71:2a:21:0b:b2:35:3b:57:75:b9:c6:83:23:e3:69:75:0a:8f:
51:9d:ce:67:ac:1b:49:d6:04:62:d9:cf:6f:b1:b1:99:95:88:
72:0f:f1:d8:76:bb:c6:58:b3:f9:35:53:9f:c7:1c:bf:ef:8e:
d0:e4:26:a7:b8:0b:1f:33:29:1c:85:99:b3:87:1b:55:0c:3a:
b7:d4:95:dc:89:ad:a0:4c:52:3f:75:bf:ce:26:4b:ed:2a:2c:
b1:55:fa:52:7a:58:f3:77:dc:b2:dd:ff:b1:15:7e:1f:97:fa:
28:2d:4d:3e:d6:3a:e2:a3:3d:ba:f4:2c:3e:e8:5b:73:97:ef:
48:c1:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:21 2025 by rpki-client