Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: m7yY0j58Id2x+0DRW0PQ0imfgAmCl52TatAE2OHwzmc=
Subject key identifier: 8D:DB:A3:78:6F:2F:07:F4:C3:A7:CA:D7:18:D8:7B:8D:BB:51:35:53
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 0198D54E6CD21CEB6F9D0DA444C7F631C87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0B7E
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: sI4ociH6bZnsgFv1cN0SZ11HszLzSEF/y4AZ8NDOW04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:d2:1c:eb:6f:9d:0d:a4:44:c7:f6:31:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=8ddba3786f2f07f4c3a7cad718d87b8dbb513553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:82:bb:89:2b:a6:bf:fa:9c:5d:0c:72:84:
dc:e4:f9:29:99:64:7d:28:8c:b1:0d:15:bb:0b:22:
f2:38:60:f5:84:19:f4:1c:04:28:54:56:d7:9c:63:
c8:77:8f:ba:18:37:34:48:b0:7e:97:d5:a2:6d:69:
ee:d6:39:d0:4f:91:50:45:ac:71:15:f7:57:54:78:
a1:56:10:51:98:45:d3:f7:e1:8b:92:d3:bf:86:cc:
db:03:f8:e7:bc:86:72:12:64:68:62:75:50:45:05:
d5:6a:73:ab:19:6b:58:e5:e6:ef:92:1f:fd:4b:36:
4a:c2:72:fb:60:a1:90:52:86:5d:9d:5f:2b:a5:b5:
bc:96:f8:d7:b5:43:c7:23:4b:29:af:06:09:59:53:
43:2f:c8:4c:c0:66:76:27:63:a1:2e:a6:57:63:ed:
e1:14:a8:fd:be:f3:91:54:c9:7b:a5:2a:77:95:bd:
b0:f6:11:42:8c:74:ca:fc:20:af:95:4d:ba:88:35:
e1:b9:8e:6b:50:ba:e3:72:00:50:ab:ab:c2:fc:0e:
86:b1:f8:55:7c:9a:bb:b4:0e:51:5f:5d:03:1e:8b:
ab:75:9e:6c:de:48:55:9b:a3:a4:14:ae:53:38:b1:
17:86:88:99:8f:94:e0:98:6b:1a:6a:82:3f:c7:f9:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:A3:78:6F:2F:07:F4:C3:A7:CA:D7:18:D8:7B:8D:BB:51:35:53
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:15:e4:33:b4:bb:86:f9:77:23:f4:9b:49:31:86:6b:ab:bf:
96:0e:70:37:39:15:8d:0d:6d:c5:86:da:c8:4e:44:74:2b:f5:
62:08:05:c4:ce:4e:91:83:9d:92:d3:c0:5e:1a:e8:9b:03:c2:
14:89:2e:60:30:44:a5:58:f6:42:a7:69:9a:b4:9e:93:3f:5a:
01:b8:3d:f6:10:77:61:2e:a6:05:c4:46:a4:ac:7a:eb:1b:c6:
62:2b:15:66:ea:a4:ff:dd:1e:02:f6:d9:27:57:5e:38:c7:a2:
78:c5:64:19:85:e8:ab:b2:28:a4:ba:f4:ba:c6:8b:35:dc:27:
c2:ac:a8:25:44:e7:23:c5:8e:56:a5:18:bd:20:36:1e:56:26:
db:a6:95:7b:fb:3a:96:01:33:f1:2a:da:e2:ed:48:a6:20:60:
7a:f6:ff:8f:9a:6e:c1:8d:45:ab:39:b8:d4:b1:d4:e4:86:4b:
3c:e9:81:ff:e9:9e:44:27:fd:d5:de:d6:f5:27:cc:c8:78:94:
19:7d:00:0e:2d:58:1c:fb:b8:69:ef:5b:25:20:04:99:be:fe:
c5:32:6f:d5:b2:9f:13:9f:14:c8:1d:fa:a3:30:f7:68:d4:68:
39:e5:c0:bb:26:aa:ab:d0:ec:30:09:3d:4a:66:43:2f:63:62:
53:06:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:47 2025 by rpki-client