Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: uu+4NURCwz36eUc1skquoFoTS5A/4GnhQ8uSDnuIl10=
Subject key identifier: 8C:60:E3:2F:F1:93:E4:6B:AF:F7:B1:36:E1:6B:DA:EA:AA:A2:1F:9A
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 0198D515DF0E145E1A32F5614A3DF775AD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 128D
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: 7hfvT73Bz9qHrPnvvrXQO+VcVPFp32e2HuqufJG/V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:df:0e:14:5e:1a:32:f5:61:4a:3d:f7:75:ad:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=8c60e32ff193e46baff7b136e16bdaeaaaa21f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:5e:bb:7e:a0:54:8d:b7:23:96:c1:7d:81:
7c:04:df:7e:4e:c8:8d:97:fd:6b:3d:9c:b5:4f:71:
3d:ff:3a:27:e6:a2:64:ba:8d:99:ba:72:35:6b:48:
2c:ce:ea:c1:ea:e4:e5:dd:d6:bf:f5:6e:22:b3:a8:
13:00:d6:71:3a:0d:42:fe:91:5f:c4:a7:f5:51:ea:
85:d8:2f:32:30:2b:d1:4c:11:80:16:28:7b:88:ef:
a7:6f:ac:18:ea:a2:cc:26:62:76:f3:a0:b2:40:b9:
14:6a:2b:a9:01:59:ea:c2:8e:9c:22:da:66:14:cc:
57:7e:c7:35:a8:f8:79:0d:af:1a:44:56:1f:bb:00:
a1:a4:4c:12:b0:55:10:06:c7:73:65:98:28:60:0a:
e7:8e:c0:22:e1:10:62:83:79:9f:b9:71:b7:1a:af:
2e:f2:5b:66:ca:75:33:7e:fa:86:4e:fd:06:ba:94:
9c:de:29:de:f2:26:eb:f4:ee:b0:9f:1e:c3:51:24:
ab:23:fa:9d:14:bd:30:f7:36:3f:84:6c:4e:d5:d5:
c6:94:0a:f0:51:9e:47:3f:a9:36:1b:5d:be:73:24:
6d:98:40:f5:1c:7d:20:8e:da:31:fc:5f:81:b8:0e:
c2:55:b5:e2:66:12:bb:95:d1:a3:27:93:bf:1e:2a:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:E3:2F:F1:93:E4:6B:AF:F7:B1:36:E1:6B:DA:EA:AA:A2:1F:9A
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:bc:81:cf:dd:72:1f:90:07:d9:5e:b4:7d:98:52:f5:d8:
48:50:6e:ee:f0:ab:79:d4:da:50:e4:c4:69:53:29:f5:24:2a:
f9:ba:89:b1:d7:2f:7c:f5:32:44:d0:56:39:be:ab:dc:cb:c0:
b5:66:cf:41:bc:7f:17:91:ac:bd:e0:0c:aa:c1:df:53:12:07:
5d:f7:9d:a1:f9:4e:72:1a:ec:91:c3:66:e9:69:b6:43:e1:81:
0b:ea:7b:43:20:32:d2:9d:b0:ff:4e:43:6f:a4:4e:2b:06:70:
94:da:4c:f8:43:24:ca:b5:84:5f:a6:a7:59:a0:2b:dc:bf:b3:
4c:84:86:29:70:7f:a5:18:13:05:ff:cb:7d:5e:17:84:11:3f:
ea:8f:50:fe:95:f1:6b:94:80:c5:3d:57:27:92:00:3e:b0:9d:
1a:ac:74:38:f2:ff:33:23:db:25:66:7d:c3:1c:db:9d:06:00:
a3:e5:47:e4:e5:58:cc:1d:da:2e:8d:59:fb:35:0a:76:59:55:
9f:3b:61:b3:f6:0b:8a:8e:b6:39:52:16:bf:4e:d8:5e:5a:ff:
0d:b1:11:6a:1c:47:45:48:85:a6:eb:98:a9:ff:e4:4e:89:76:
38:48:a9:63:50:4d:9b:e5:89:cf:3a:4b:c0:98:d4:ed:fd:a9:
13:57:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:45 2025 by rpki-client