Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: lKMGVrzLuYdtjBtp0TGQi8GjkW2nklS+9p/x88hBugg=
Subject key identifier: 2F:7B:62:D7:DF:08:9B:80:64:72:3C:75:79:BB:72:AB:05:C3:E7:59
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0198D7738FAA7C9AFF6630E162AA585BA1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 050F
Signing time: Sat 23 Aug 2025 15:02:11 +0000
Manifest this update: Sat 23 Aug 2025 15:02:11 +0000
Manifest next update: Sun 24 Aug 2025 15:02:11 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: DyWF5GpDm4j8z7z1bQnUAnurGAtwSBj46gC8FnckKtU=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8f:aa:7c:9a:ff:66:30:e1:62:aa:58:5b:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Aug 23 15:02:11 2025 GMT
Not After : Aug 24 15:02:11 2025 GMT
Subject: CN=2f7b62d7df089b8064723c7579bb72ab05c3e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:a4:e6:ca:d1:20:79:0b:2c:4f:37:c9:15:
cc:3b:29:5e:16:60:e6:9c:e0:88:2f:51:cf:b0:e7:
c5:e8:52:3c:e5:28:73:dc:a5:bd:00:d3:37:89:c7:
2a:55:74:cb:99:ca:b2:ac:68:c6:85:36:12:ca:97:
3b:e1:6c:22:d7:2b:d2:a1:26:2e:df:af:44:5b:54:
c9:59:fe:65:c6:5f:53:ce:c7:9f:8f:91:6b:75:c3:
1b:8c:94:93:0d:e7:6c:55:c4:55:15:26:5b:e6:8e:
33:89:b2:63:36:f7:eb:62:bd:07:98:01:ad:6e:f9:
b9:d6:bd:ca:70:d9:7d:c9:34:11:29:2d:6a:90:fb:
2e:1a:5d:0f:12:0b:a6:db:0d:06:ca:6e:e5:76:57:
ff:56:85:08:ee:be:a5:6c:06:ab:83:f2:80:8e:7c:
00:58:e8:7a:31:0e:73:b4:66:75:51:da:e1:c2:b4:
1c:8f:ec:42:8c:40:34:c0:74:15:5d:a2:79:33:b2:
97:a0:f6:32:86:10:d1:9e:b8:18:79:bb:c0:17:ca:
2d:04:2f:68:84:09:28:13:01:c0:15:4a:0c:92:78:
58:21:b9:72:d3:fc:69:5c:79:d8:47:e7:80:8b:3d:
68:7c:df:23:a2:f8:2a:11:5d:8f:d4:0d:cb:c4:3f:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:62:D7:DF:08:9B:80:64:72:3C:75:79:BB:72:AB:05:C3:E7:59
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b0:72:89:5b:30:e0:02:75:eb:49:9d:35:53:95:9f:00:ce:
f3:6f:0d:5e:9f:66:b0:19:3f:b5:ae:97:00:46:94:36:dd:e8:
48:e0:5d:d6:65:57:d8:1f:89:4d:c1:12:e4:fe:dc:2a:8e:40:
ac:ca:85:24:f6:6d:35:46:c6:a5:69:c8:2c:4d:1b:29:55:21:
b0:68:a1:fc:81:ba:fb:e4:5b:f2:73:22:4e:f0:64:48:27:bf:
f6:cb:20:42:8e:5c:29:bb:6b:61:2d:27:73:f7:8b:38:df:99:
5b:e7:5e:2a:3b:c5:1b:b7:79:65:78:56:43:b4:8c:24:ae:c3:
24:f2:77:00:39:a0:78:a2:d7:45:92:10:a2:85:c6:f7:ba:f8:
65:8e:de:78:7b:2d:ea:9c:65:fc:23:30:d2:68:ac:e0:30:d4:
a2:58:68:de:99:f9:6c:a7:7f:30:6c:1e:49:ef:9a:1f:a6:1d:
29:00:c0:68:22:17:2a:71:bf:86:bd:a5:12:fd:12:89:89:fc:
ba:d4:dd:fd:cf:ad:71:6a:d3:fe:15:9d:1c:25:37:6c:be:d2:
67:18:43:db:ec:e6:6f:55:a0:63:f1:c4:37:62:8e:27:60:41:
20:0d:71:38:bf:f5:b1:62:26:15:0b:70:62:2b:c1:74:23:e5:
0c:32:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:56 2025 by rpki-client