Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: NU1J3ZuiM7bDtKuHPLTwlF0nCS7uIebv4bKyDZ/LZUs=
Subject key identifier: C7:08:5C:5E:22:16:FE:EA:9F:A1:08:A6:BB:14:12:C4:08:9D:D6:78
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 0198D660BF0CB056D47C8817146A50A3821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0B94
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: nxo5MOCfC1hRqqbCGdW7l8MImXSSkg76yMoWMlnjIDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bf:0c:b0:56:d4:7c:88:17:14:6a:50:a3:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=c7085c5e2216feea9fa108a6bb1412c4089dd678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:b5:b7:3b:e0:b1:15:b4:e3:50:38:dc:e9:
38:cf:35:dc:93:8c:cf:32:b3:d8:c4:4c:9a:f0:5d:
99:cf:8c:d0:bd:4f:f9:aa:bc:4d:f2:34:47:d3:dc:
08:13:5d:13:6b:51:bf:85:b8:41:6e:79:59:d6:e4:
bc:50:26:2b:17:b0:29:9b:be:96:36:fe:bb:98:81:
96:37:a6:6a:40:3a:da:8b:56:2d:e0:94:7e:b0:ee:
bc:ae:8d:bf:f1:18:86:bc:47:38:08:34:5d:60:60:
18:c2:b6:bf:9f:60:9a:4e:2b:70:5c:3a:b1:13:b2:
43:56:ae:11:91:f8:02:16:3e:e4:cd:77:4b:80:f8:
95:bf:bd:c8:d5:2d:93:66:15:03:fe:30:54:f5:7c:
15:ba:ab:0b:fc:b8:59:f9:c9:ee:34:03:48:65:cf:
d4:33:e5:62:e4:bd:2e:dc:43:5e:f6:df:92:b6:f2:
5e:aa:4e:24:c3:6f:56:b3:fb:08:7b:b0:28:47:2f:
c5:9f:9b:04:20:55:47:b4:cd:e8:26:0b:17:86:a4:
e4:d3:25:83:0f:9d:41:30:b1:03:a0:76:de:d2:1e:
5a:90:59:86:8a:bb:d7:56:fa:3d:3f:fb:fc:b6:cd:
12:76:37:45:9d:e5:29:48:39:db:58:21:4e:02:7e:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:5C:5E:22:16:FE:EA:9F:A1:08:A6:BB:14:12:C4:08:9D:D6:78
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:09:f0:31:f8:dc:fd:2c:f8:9a:00:6b:de:62:87:00:ae:29:
56:36:fd:43:b6:54:26:dd:1e:26:d0:5b:22:e5:ba:df:dc:b9:
33:b8:40:5f:2a:bd:54:1a:15:2f:4d:c8:4e:9f:e5:52:5f:10:
cf:03:6e:6e:d8:e8:61:f6:6b:7a:28:43:6b:31:72:47:ec:a8:
5b:3d:c9:0d:cb:32:9b:7f:7d:dc:57:21:36:58:9a:33:84:ff:
df:e0:d4:1a:66:08:9b:6c:6b:c2:77:28:0f:a0:7e:d5:e1:f1:
66:d3:73:75:a7:41:9c:92:2e:5b:f5:b7:36:a2:2c:a9:18:75:
73:b5:97:89:e0:03:3c:dc:5e:02:f6:39:3c:1c:0d:f7:7c:5e:
4d:ab:f4:b5:b6:96:1c:d3:60:66:97:34:52:e0:36:d9:74:2b:
6f:28:77:8c:56:dd:c9:9f:fd:3f:84:46:70:63:98:30:03:9c:
fa:c3:d5:d3:22:01:6c:77:c8:fd:61:50:8e:78:3d:e6:b9:0f:
18:72:be:02:63:3c:08:07:ab:aa:27:aa:bd:6e:8e:2d:7b:a2:
2e:8e:06:06:8d:e9:d0:b3:2a:c9:bf:54:54:d5:fe:bc:b8:67:
db:be:cc:94:e6:34:09:ff:a3:23:1a:27:aa:b9:02:49:2b:53:
e4:bf:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:44 2025 by rpki-client