Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: PGbLbSH7+DpyjiYz7LonwfQZ8QR2BJnxDQn//ImJPJw=
Subject key identifier: F6:99:01:AF:0E:47:27:5F:86:E6:26:CF:D0:8A:DC:22:93:F0:41:C9
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0198D4A7DBC90162B64A565D9D629FD1AB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: Umjb8UUMYG4mabx6EfuuZ2PGX2LcREgIuEVnbTv3CDk=)
2: og2S8T7snwmIfxqWVsKnAziyqjw.roa (hash: nyDnsuqaFzZObVQeI6lulOe/nyo6A3NyWlMKfoM7RSQ=)
3: vKriE8D7CoWGOAuEJjdCDHiphnM.roa (hash: m79nN+UrU8j16v9mI0XjJNr91VUB5btmVcolsvCKAMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:db:c9:01:62:b6:4a:56:5d:9d:62:9f:d1:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=f69901af0e47275f86e626cfd08adc2293f041c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:66:bc:57:c3:2f:8d:db:97:d5:2f:14:ef:
8f:b4:09:74:78:a2:c4:90:0a:b1:33:bd:74:e9:30:
d7:f7:da:9e:78:81:f0:bf:05:13:2a:a9:6a:5f:6c:
2d:9d:03:56:51:64:56:45:0f:23:5f:5f:6b:d4:72:
1b:84:9f:f3:e2:c5:c8:d6:06:8d:a1:eb:81:5c:52:
8c:e2:cb:ef:34:20:03:ef:40:98:5c:83:22:9f:d6:
6a:ee:d4:25:c3:3e:d3:4c:ed:bd:04:11:b0:50:aa:
89:11:bc:30:d1:62:d8:20:bb:f1:a1:52:5a:93:d5:
06:11:92:13:d3:fa:64:1a:28:c2:3f:59:46:c6:a3:
0b:e5:d8:dc:09:c0:04:f5:b1:1d:07:35:7d:b3:75:
2b:5a:93:8a:1d:2c:4d:8f:6b:de:7e:90:14:b2:0c:
34:f4:6c:a2:6e:5a:bb:69:5d:8a:c3:3b:fa:66:4b:
25:6a:5d:79:57:10:49:66:c3:e4:7a:94:75:f0:7c:
00:04:44:55:a8:39:f9:a9:2e:ad:5a:bd:bf:20:ec:
f1:b9:42:ac:bc:fe:ef:f6:1d:7e:5c:79:06:6a:c2:
b2:9d:b2:d1:34:d7:6d:9d:d8:70:92:58:8a:c6:ce:
ea:c8:e1:ad:65:f1:78:8e:af:49:cf:72:8f:d5:38:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:01:AF:0E:47:27:5F:86:E6:26:CF:D0:8A:DC:22:93:F0:41:C9
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:72:44:b3:45:32:9c:7d:c2:81:cd:d5:8b:03:c5:7f:23:
88:e8:66:8a:8f:62:01:a1:b7:97:14:2f:f8:59:5f:b8:c7:eb:
5a:19:e4:06:33:42:7f:f0:cc:95:a7:23:61:e3:fc:4e:01:f3:
e7:bb:18:96:47:70:5b:b7:e6:85:69:75:19:25:98:bf:01:a1:
95:28:ce:de:80:40:fd:8e:34:22:0f:bb:8d:78:46:21:ff:89:
2c:c1:3f:2d:3c:a0:ea:f8:26:9d:8d:2c:31:23:e3:cd:69:f6:
d3:83:48:40:8b:66:a7:38:a9:92:d4:13:99:b5:9b:86:51:f0:
6e:93:c1:01:b8:9b:9e:24:57:fc:b4:bf:3f:37:85:1f:e0:f3:
28:33:24:5e:3a:f6:22:d0:c9:3a:e0:9b:f0:d1:85:9f:42:58:
20:0c:22:2f:6e:d5:5e:b8:bb:0c:9a:36:ab:79:ea:c3:af:05:
ca:1c:0c:f2:00:d6:1e:7e:fa:c5:8b:9f:33:80:aa:77:7d:91:
64:c4:ea:ac:88:e4:ad:72:56:2e:10:02:19:74:2b:c1:57:c5:
c6:8d:d1:95:2b:f7:9a:94:a7:bd:6f:ca:da:41:88:54:21:84:
e9:55:10:ac:1a:ea:f9:03:cf:75:e4:32:02:4e:65:66:15:e7:
94:6c:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:18 2025 by rpki-client