Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: +xAnIzK7TRkY0z2aUWRUrl8aUD9+kyC3lyZwwnX3oko=
Subject key identifier: BF:F1:FB:3B:54:A7:8E:77:F6:05:27:2E:94:39:17:A4:FF:69:C2:21
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0198D8BDDD516D499E45E084214A46BEB3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 12E6
Signing time: Sat 23 Aug 2025 21:02:58 +0000
Manifest this update: Sat 23 Aug 2025 21:02:58 +0000
Manifest next update: Sun 24 Aug 2025 21:02:58 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: SRRtLUlrOoUiaEeZiPM8fOhrl9izak9FvyAbTUoi8mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:dd:51:6d:49:9e:45:e0:84:21:4a:46:be:b3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Aug 23 21:02:58 2025 GMT
Not After : Aug 24 21:02:58 2025 GMT
Subject: CN=bff1fb3b54a78e77f605272e943917a4ff69c221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:a9:e7:cf:61:4f:92:6e:90:a6:a4:fe:6c:
d3:28:9a:14:0d:fc:87:e3:63:ca:20:19:60:cb:9b:
92:28:e2:85:cf:98:5a:ce:2a:cb:5b:f4:b2:28:fc:
3e:3e:fc:50:ef:c4:07:11:23:d7:e1:ec:e0:d5:b7:
a1:f1:9a:51:a1:c7:e6:20:3b:09:13:e2:bd:1e:10:
84:d7:af:7f:e0:52:c1:02:d7:bb:9d:e2:c1:6c:e7:
de:de:b6:a2:0d:4b:bf:2b:59:da:22:a0:4a:e1:a8:
59:bf:b5:5d:e2:09:5d:4e:57:cd:db:de:05:08:6a:
2e:b0:f6:e3:ae:a4:32:dd:05:00:7b:58:1e:36:c8:
53:c9:a8:25:01:ba:36:a4:3d:8a:5d:62:d0:32:7a:
13:bd:fb:dc:c3:b6:43:95:f7:75:64:e5:0b:4f:db:
48:38:16:aa:ab:c2:5a:c4:5c:82:08:f3:f8:90:90:
3b:46:33:57:f5:bb:db:4c:2a:cf:bd:eb:2b:3c:c6:
0a:d1:95:db:8b:ce:c3:81:3d:db:3f:e4:67:07:6d:
0a:6a:9d:12:3e:4f:fa:67:88:6f:c5:dc:b1:56:6b:
11:07:71:c3:d9:0b:c7:4f:ee:49:a5:33:1a:eb:f8:
59:17:a5:f2:4b:9b:0f:37:cd:eb:a0:03:6c:66:fa:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:FB:3B:54:A7:8E:77:F6:05:27:2E:94:39:17:A4:FF:69:C2:21
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:90:a2:7c:30:be:ae:7c:60:0e:db:49:d5:47:62:1b:ad:
87:1e:b3:5a:02:7d:a0:a8:83:5a:1b:71:07:e4:96:0c:97:e1:
2b:3a:84:34:34:c9:42:cd:d4:a3:30:8f:fd:5b:12:58:60:e8:
ad:e9:f2:b2:e6:91:a9:be:e7:0b:d3:10:e5:78:f6:61:bc:10:
78:42:4c:d2:7e:b0:86:80:bc:fd:0b:0e:ca:aa:94:45:79:ba:
17:3e:4c:37:0b:11:d3:4b:cb:74:0a:03:97:ac:2c:68:c7:2e:
72:f8:5a:30:e2:a3:95:65:67:b0:90:98:aa:d3:a3:c3:62:38:
55:a8:f3:8a:66:20:4f:5b:4e:d1:7e:a8:9d:ee:55:20:d6:c4:
aa:7f:43:eb:25:bb:a8:16:c8:8e:ea:23:cc:26:9c:a2:68:c0:
56:8e:d1:96:de:a7:06:9b:4b:35:16:53:21:48:1f:d2:bc:de:
a6:23:17:98:ef:70:f4:01:fa:f6:d0:f7:95:d0:d1:a4:7d:98:
4e:7a:dc:b9:83:45:89:50:f7:f0:87:cf:e8:00:91:91:18:b1:
97:f9:dc:1b:e7:13:d5:fb:9d:b6:4c:03:78:7c:5c:8f:4f:5f:
19:1f:9e:60:fa:63:66:a4:7f:21:77:ce:74:f8:c4:fa:8b:e9:
87:ab:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:11:02 2025 by rpki-client