Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: gu+Hm2hKeCy7H0QOUbgLanuLZes+3u2+4g6cKKiRFbY=
Subject key identifier: 55:7F:FF:44:64:41:71:2B:E1:84:08:19:0F:FE:18:B1:40:B9:AF:83
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 0198D58378786D0DBBF3DBCA56F09E3379DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 10AA
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: DfIfeCsjxuTLGxOswS1IRTtCtFo.roa (hash: BfLaITLvBopGuXyhXf+VexAjyd8LBGCkT8+9wJK+KLI=)
2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: uV7HUTWU3tIq9TI1kEO8ZinMxPHXZ7TG7ueJEm5Jdik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:78:78:6d:0d:bb:f3:db:ca:56:f0:9e:33:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=557fff446441712be18408190ffe18b140b9af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:b3:a8:9b:a6:11:43:f2:7e:29:61:a8:b9:
52:3d:6a:93:38:f9:eb:15:43:60:3d:cd:85:bf:4a:
62:09:6c:cf:fd:6d:2e:ce:a0:b1:7b:fa:78:ab:1c:
81:79:2c:ae:ae:d8:36:b3:45:89:76:bd:95:b3:b7:
91:4f:25:f0:a8:5f:ce:ab:d8:ba:8b:19:1b:3e:1a:
f8:9f:66:23:15:bd:a8:a3:2d:46:9f:62:d1:f1:90:
ce:ab:68:30:90:07:bb:be:24:89:06:ed:f8:a7:55:
20:6f:52:98:be:73:fc:06:23:df:1c:5c:71:30:18:
83:0a:86:3e:d7:11:04:fe:41:b4:ee:db:0a:58:5d:
ba:9e:e9:05:12:ce:03:01:36:74:e6:f7:2e:6c:c2:
4c:d5:6b:da:a9:4e:82:0b:89:e1:8a:e3:df:88:eb:
89:5d:eb:67:d8:af:d4:4d:36:31:86:61:47:c0:49:
7d:c4:d2:a1:96:5a:49:c1:ef:fb:ce:5e:5a:e5:d4:
97:53:54:d5:b8:7f:11:24:eb:5e:9d:f6:eb:4f:ea:
c8:b7:2a:d2:40:c0:74:60:f4:a6:f7:64:dc:8b:fb:
b2:4e:b1:e9:25:69:34:93:37:18:ec:74:6a:15:81:
02:33:a9:b6:df:d8:50:29:06:cf:9c:51:6b:36:1a:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:FF:44:64:41:71:2B:E1:84:08:19:0F:FE:18:B1:40:B9:AF:83
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:2f:a1:6f:01:65:7c:02:6c:25:80:90:ca:5b:1f:bf:c7:fd:
05:96:01:02:34:ae:14:e5:e9:f8:60:0f:16:2f:3e:a6:eb:31:
47:1c:72:2c:76:4d:c0:54:37:df:6b:d7:c3:eb:26:fb:c4:b0:
da:c8:08:22:55:9c:9b:9e:71:03:b7:69:c7:1a:25:cd:15:5b:
47:39:88:d8:8f:a7:87:4c:bc:0d:82:fb:19:66:38:d5:0b:ab:
28:f5:64:56:80:1b:2f:f8:54:98:a0:5a:4e:d1:43:e8:25:fe:
cc:58:47:f7:74:56:60:62:3b:56:6a:1c:b4:e7:1d:dc:00:c9:
2a:35:7f:61:cd:db:da:05:e3:ef:d2:60:1d:28:5c:6d:44:11:
04:ee:d0:5d:56:3c:d1:88:15:91:b5:8b:8e:a1:84:c4:53:de:
2a:2f:48:47:a8:2e:59:4a:77:f7:07:d0:39:98:10:d6:d2:02:
72:b9:0b:9f:3b:55:f3:79:15:53:2c:2e:81:5f:d2:72:3c:a8:
60:e2:d9:be:3e:f4:08:57:dd:2e:56:49:06:e8:af:16:4f:fc:
77:3a:3c:af:18:04:04:41:ac:00:45:d5:b2:e0:67:15:e9:a6:
13:8b:07:8e:21:88:64:a2:b6:2c:ee:e6:00:1f:4c:71:32:89:
5c:77:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client