Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File: o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier: cVhnrVvrKsCyvKvlUgI/WfqwEMlHP2Tdx5sQ/WVwhlg=
Subject key identifier: 4D:FA:E6:62:C6:E5:EA:68:0C:B6:EE:F0:45:F1:E4:2E:5D:2B:00:65
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer: /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial: 0198D705F7DD9164CEDE4E95066CDC314CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number: 2D
Signing time: Sat 23 Aug 2025 13:02:29 +0000
Manifest this update: Sat 23 Aug 2025 13:02:29 +0000
Manifest next update: Sun 24 Aug 2025 13:02:29 +0000
Files and hashes: 1: fgNc3XJYzlvVGoE08QNz7y8we1c.roa (hash: 0HZ8FpOe+yubT+Fy50QFxz4rHKcRQcjh6z09BKS1JVY=)
2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: qLUhvWNhWqFNjcpA8zSacyGj9jGvw9UZBwAOqJorDSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f7:dd:91:64:ce:de:4e:95:06:6c:dc:31:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Validity
Not Before: Aug 23 13:02:29 2025 GMT
Not After : Aug 24 13:02:29 2025 GMT
Subject: CN=4dfae662c6e5ea680cb6eef045f1e42e5d2b0065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:f7:56:e6:f2:3b:8b:48:0e:f6:40:6e:24:
62:08:24:27:f0:7f:80:ee:22:5f:72:c6:42:24:7a:
fe:41:db:db:b8:db:5a:65:68:7d:32:94:66:8a:75:
9d:d4:52:49:00:4e:f1:8f:23:32:1c:14:f6:20:6f:
23:ad:f2:c1:4d:d7:6d:e5:18:85:80:b0:92:f7:80:
7f:95:1d:3c:c2:04:f0:7f:57:d2:3b:99:93:0c:31:
28:4b:2e:e6:20:1e:bf:86:5a:fc:b8:a4:e8:48:a0:
b0:90:d7:64:3e:14:1c:ae:15:02:fc:07:27:75:f4:
8e:f8:24:72:60:aa:52:e6:d4:60:e1:7c:0e:f6:99:
92:f9:97:62:b8:73:68:5e:ad:c4:cd:c1:bd:a9:65:
dc:28:32:b6:3d:36:b8:0a:cf:9d:36:62:03:bf:e2:
b2:75:f5:8f:13:73:dc:e7:c6:cb:68:b7:9a:f9:a9:
2c:3f:d9:17:84:b2:b2:95:09:42:8b:3d:f3:b8:5d:
6d:e5:8e:b3:63:5d:8e:48:c9:7c:b6:65:73:5c:e5:
b3:60:b0:a0:bf:30:d0:ef:bb:7b:d9:c4:84:65:ab:
4e:ab:85:9d:20:e1:66:38:4f:18:5c:d2:1e:62:fb:
bc:d3:fa:f1:0d:14:c6:e3:7b:d1:c7:50:1b:f0:42:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:E6:62:C6:E5:EA:68:0C:B6:EE:F0:45:F1:E4:2E:5D:2B:00:65
X509v3 Authority Key Identifier:
keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:e8:13:db:19:94:b1:79:58:b9:fc:b4:68:30:99:49:44:
8e:5c:33:e8:33:65:fa:82:2f:72:90:7f:67:fe:90:f4:f7:d0:
da:e3:e9:22:4e:00:68:56:1d:80:09:ae:05:eb:13:ae:67:f5:
17:94:9c:25:a2:5b:39:16:39:0f:43:77:95:73:03:f4:1f:17:
6a:35:a4:48:76:e2:09:ff:af:16:11:62:cd:68:64:3a:34:44:
ab:75:1a:53:3d:ff:0a:4c:65:c9:e1:cc:d9:81:de:25:ea:ff:
13:1e:bd:1f:32:a0:16:ac:f9:f6:94:38:c1:f8:ca:1c:5c:f9:
e6:fc:92:c1:77:d0:5e:66:d2:9b:19:6d:a8:3e:6d:35:f8:d3:
e9:54:cd:93:de:32:86:f3:f0:8d:6a:85:eb:f0:52:f6:c9:7c:
56:4d:f6:a2:fa:0d:58:69:e9:b8:b0:7a:64:8a:36:c4:67:ca:
3d:2c:a3:85:09:41:49:fd:1a:fc:80:90:47:88:12:e3:58:c4:
11:2c:07:bf:f6:22:60:75:f5:4e:08:4c:23:5a:84:34:46:c7:
81:68:d5:bf:0d:92:d8:ee:2e:ba:de:8d:6e:77:21:7b:40:53:
73:ed:5c:e8:15:5a:9c:3b:e6:fe:4f:2e:f1:81:5c:e7:c6:7a:
ef:8f:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:46 2025 by rpki-client