Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: FgnVlm0eLguUuq49hnKBEHRcTkz7ozUL8h3fHK63lSo=
Subject key identifier: AC:27:5A:68:AB:AA:7A:81:D9:C6:E7:79:54:88:00:25:EA:4C:30:78
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0198D54E328301B18D48D82F4DC540181AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 05AC
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: jUI83cYs+MbI86lucEnVG9LGiCNIdJhPQXPu9hvq1io=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:32:83:01:b1:8d:48:d8:2f:4d:c5:40:18:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=ac275a68abaa7a81d9c6e77954880025ea4c3078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:f9:d7:14:bb:49:63:8c:18:f9:b0:88:17:
29:44:5f:49:a2:fd:f9:93:aa:fe:2f:c9:a8:1b:ab:
5e:06:c0:03:47:c7:3d:c3:d3:db:10:5b:07:9b:74:
6e:b3:9b:44:94:6f:07:5d:63:6d:28:33:7d:af:0a:
97:e6:68:d2:ed:80:19:5e:c9:40:41:b4:80:47:01:
49:04:41:c5:43:4a:d7:6c:06:3f:13:9e:52:e1:f0:
4e:9c:fc:17:28:bb:7b:08:02:58:4f:ca:d1:33:84:
45:3c:00:37:1f:84:40:90:15:f4:97:b1:d5:02:c1:
b4:8a:a3:24:4c:3e:00:2b:c4:13:bc:03:62:a9:98:
1b:6f:fe:76:48:ed:79:0a:b2:36:3b:56:c9:3e:df:
6f:65:9e:ba:21:b8:d8:6a:e9:26:a4:96:b9:f7:01:
3a:15:bf:c6:53:0c:47:7b:bf:05:b5:52:8e:7e:1e:
4c:79:89:df:65:ed:f6:52:aa:03:31:9e:ab:82:72:
7f:a3:6d:2e:99:90:4e:bd:9c:a1:82:5b:8b:53:bd:
91:02:f3:e9:c4:60:5a:9c:fd:95:0f:76:19:92:6b:
ec:b7:5e:92:05:35:db:80:d0:15:3b:d6:f7:66:3b:
b5:19:3f:c3:f8:12:18:77:8b:29:62:d8:02:7c:02:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:5A:68:AB:AA:7A:81:D9:C6:E7:79:54:88:00:25:EA:4C:30:78
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:33:47:52:07:8c:80:cc:db:14:55:9d:e2:9a:8c:cb:c5:
84:49:e3:c2:b9:65:ef:64:80:1b:24:6b:42:db:52:9a:15:91:
81:61:ba:00:d4:65:93:d8:af:61:1c:90:b1:fb:74:56:06:1d:
68:4b:9f:f5:76:2d:7f:86:87:5e:f1:ba:f1:cb:fd:b6:31:19:
8c:83:9e:fd:55:07:f9:22:68:62:d8:b5:da:c3:2e:8d:1f:17:
81:16:32:c2:c4:34:08:07:da:27:be:86:63:d5:39:dd:7a:11:
f5:46:fb:ea:26:63:50:1f:02:39:27:4c:97:58:3a:ac:5b:94:
96:85:fe:0d:6f:10:fc:d2:30:01:f6:2a:83:ec:1f:05:9d:e8:
ae:5e:73:f6:30:fa:7f:e2:69:a0:f3:a5:b1:5d:f6:e9:00:e3:
00:38:b6:00:94:2f:59:e4:be:55:f5:65:09:8e:f5:9e:38:8b:
2c:c9:1a:40:ea:ec:45:9a:1d:4a:a6:c6:1c:93:61:6f:8e:c0:
dc:33:74:a2:d6:0d:35:87:aa:92:4b:05:08:49:ab:4a:ba:12:
57:01:51:45:4b:68:8a:17:10:c7:df:99:4e:64:3f:ef:9b:e2:
b1:e7:13:f4:7a:13:11:c7:40:05:a2:3b:74:f3:77:2b:2f:b4:
f0:cc:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:47 2025 by rpki-client