Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: xecTbBzMA15hwj0dHP68cMvkWxXhkJmTciN80HLEmqc=
Subject key identifier: 06:BC:69:9C:8A:5E:DC:D7:74:AE:CD:06:A0:0B:B5:0A:0A:79:6C:8A
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 0198D473E446C9F73496A5A7104EBF2FF08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: sclMYupEVhQr2kYdfzxmVOPp02Mc3UFSnmjnu7pCoWk=)
2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e4:46:c9:f7:34:96:a5:a7:10:4e:bf:2f:f0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=06bc699c8a5edcd774aecd06a00bb50a0a796c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:ae:8a:da:11:ce:39:31:03:e3:3f:05:8b:
88:53:e7:56:88:93:82:39:b1:e5:94:c4:b2:6c:cd:
d9:56:94:1c:f8:06:0a:c2:8b:89:e2:15:e8:2c:e9:
d8:78:ea:e4:aa:2b:41:31:4e:91:7d:7d:a7:a3:75:
23:c6:ab:e3:5d:f0:04:76:54:64:aa:ab:76:28:4a:
6c:eb:86:13:d3:c0:97:14:c7:a6:e3:18:05:40:25:
d8:f2:c4:b9:3b:10:7d:1c:67:81:22:f7:76:2a:37:
a1:96:e9:37:55:0c:55:e0:dc:ea:fd:96:45:e6:24:
0d:6b:b8:73:10:8f:9b:3a:d1:56:c9:02:86:88:bf:
2e:5d:8c:65:00:3e:9c:5c:f7:70:8e:c1:28:6f:95:
f9:95:2a:f8:e3:81:f2:a5:dc:71:f8:bd:f4:17:63:
84:8a:27:05:17:4f:e2:41:37:9f:be:d7:a9:7e:d3:
11:83:38:6c:47:52:1b:3c:c0:0d:6e:68:90:44:55:
fd:87:ec:c0:27:3b:ca:57:74:4d:35:11:47:4e:72:
5a:53:f2:1b:86:16:16:24:b8:0b:7c:6c:b6:72:91:
77:65:cf:1c:b4:51:d1:43:99:b9:16:8c:1f:e8:9d:
cc:ef:eb:fc:cd:d0:31:b1:20:b9:2b:a7:e8:f4:1d:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:69:9C:8A:5E:DC:D7:74:AE:CD:06:A0:0B:B5:0A:0A:79:6C:8A
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:eb:fb:3f:c3:65:72:82:f5:41:fc:93:02:82:a7:04:64:7c:
b6:5b:b4:db:00:20:3f:cc:bf:4b:be:20:98:e1:1b:da:64:a2:
19:7a:76:2c:56:9a:95:32:e8:59:3a:99:48:9b:be:b4:30:ab:
38:d0:a9:13:ae:32:92:24:6a:e0:1f:2d:cc:51:56:99:2a:b0:
6b:fd:41:c7:97:7c:69:04:9b:a2:42:33:9c:ac:f9:75:98:ec:
ca:c0:1f:f1:58:24:1c:18:b4:c2:3f:e1:0a:2b:68:60:7b:8f:
73:6d:7c:ee:c2:10:81:0d:ce:fd:05:51:c7:fa:85:cf:31:f9:
f7:9b:9d:25:a1:d2:34:9a:c1:b7:08:b3:30:cb:41:e5:9f:df:
b5:d7:26:a2:81:7d:6d:14:a8:d4:96:59:a7:6e:54:da:69:77:
a5:fc:21:7f:d1:3d:19:44:ad:b9:ef:d6:06:98:5a:54:33:d6:
a0:2a:bf:8d:a0:52:70:eb:36:df:17:fd:6d:b6:1e:28:8c:bb:
c8:58:41:e1:4d:61:63:b4:70:aa:7a:f3:c2:c8:35:31:48:0b:
4e:26:7c:97:78:6a:51:5a:9b:b1:00:1d:ff:f9:2e:71:cf:22:
2a:5e:6f:74:d9:5b:69:8a:2a:d8:1e:71:b3:33:e5:d4:d4:36:
77:8b:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:45 2025 by rpki-client