Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: U1eEEO7mFXreGoTC13paOISdjGtstmYMe6IiMhmySgg=
Subject key identifier: 43:FF:B8:BC:0C:33:EA:ED:EC:8D:F8:80:8F:1B:0C:9E:C3:CE:BC:A3
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 0198D473EB04F2724733703634BC86BC6EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: SQXzlDziQbl3AvD714r+n0U5UKRzFeM2Cn5u2/tjgR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:eb:04:f2:72:47:33:70:36:34:bc:86:bc:6e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=43ffb8bc0c33eaedec8df8808f1b0c9ec3cebca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:0e:ef:72:05:f2:49:cd:25:5a:1a:61:53:
58:e5:fa:c1:b6:ab:15:e4:9c:f3:00:2c:a9:fe:f1:
45:8e:46:d7:b2:6d:a3:92:c0:9a:e0:22:21:1b:ad:
a3:0b:9d:c6:e7:4d:2b:43:ba:10:fb:2a:69:7d:36:
9f:5f:36:d4:ea:95:dd:7b:cf:50:89:02:79:e9:df:
27:8d:0c:00:9d:bd:d5:92:26:41:6d:17:68:e5:d2:
15:ab:d1:c4:17:44:2f:e9:0d:bd:55:70:7d:ab:5b:
94:3e:36:f3:78:57:60:1c:1a:4f:fa:44:0e:19:d4:
7d:c1:d4:96:56:4b:e7:32:79:4f:29:0d:7e:8f:92:
e6:c2:13:68:88:2f:cb:81:ca:be:18:08:41:06:03:
0f:41:04:78:9a:ae:dc:fd:ea:e7:e5:ce:96:32:2c:
45:b0:f0:63:2f:40:26:6f:ee:c6:82:c5:e7:32:f9:
a8:08:5f:35:b6:36:81:66:af:ee:fd:ca:04:39:5b:
63:7c:7d:fc:b9:31:f9:09:6f:f9:81:e0:68:37:d6:
3d:12:40:3d:d0:f7:74:81:0d:15:ad:7b:d9:31:a4:
5e:d9:66:4f:12:2c:11:01:6c:8f:33:ca:b7:3f:b9:
ea:a5:4d:b6:39:2c:37:81:22:4f:46:cc:0f:46:93:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:B8:BC:0C:33:EA:ED:EC:8D:F8:80:8F:1B:0C:9E:C3:CE:BC:A3
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:37:19:85:b8:1d:03:95:e0:4b:5d:53:39:29:7e:bb:41:
b5:45:03:ba:85:60:dd:8e:33:af:41:e9:1e:82:db:c3:53:c9:
7e:8c:5e:b2:e6:51:37:f8:06:52:6a:84:3b:5c:08:e0:ff:f4:
9b:cb:52:54:ce:bf:14:6e:72:fe:77:88:50:2d:85:65:a4:e4:
9f:89:73:58:b2:a7:79:50:88:5e:57:b0:b3:c2:b1:71:e1:c4:
83:a9:4b:ac:1d:a1:f3:06:10:97:5e:8f:cf:f3:4a:0a:19:69:
7c:40:c2:64:20:f7:44:1a:07:03:2d:d9:5c:c2:ea:dc:d3:5b:
05:77:e4:f8:a1:41:63:19:9e:ca:7a:f0:f1:1b:81:5e:ad:9b:
2a:b3:bc:60:5b:4d:aa:d5:0b:1c:f2:6b:e1:c2:27:bd:ee:73:
4a:e4:2a:c6:d1:59:21:d2:3b:8f:c1:ca:12:25:f9:b0:5d:6c:
d6:a8:d1:c9:db:1b:44:4e:98:99:0b:a7:14:12:74:3f:ee:ec:
12:b2:a8:fb:2d:fa:8f:73:14:cc:6c:e8:bd:ce:94:b0:f7:f3:
e8:17:71:e2:9b:f0:d6:61:01:4d:5b:1e:d1:ce:05:a0:42:86:
a6:a9:85:1d:c8:40:02:a7:5b:18:7d:2e:d8:84:97:2f:18:01:
43:aa:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:28 2025 by rpki-client