Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: UEnhBLaQ9f5LJPUK+5/1wmsoc2ifSGnOE+v9X/K/i4U=
Subject key identifier: F7:9E:16:A5:5C:E8:9A:64:29:4C:2F:B8:83:97:0E:94:DE:66:07:EE
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 0198D6297BDA65E14632D02B55B9D3C2FB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 37
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: iZ5NdmCFL2KJkofQQF0JS-Yd9_o.roa (hash: B8ZarSuY+q0UuVgF85bF6OWHBT26B3wpaZ1iEoRwKdI=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: /qRmpVLqLgY5OuiwVndgae8WYu7jJn0fj2VXwtvt4vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7b:da:65:e1:46:32:d0:2b:55:b9:d3:c2:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=f79e16a55ce89a64294c2fb883970e94de6607ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:bf:86:bc:b3:e2:32:62:0d:6a:41:d8:ea:
0b:db:4f:bb:97:6e:cc:33:50:7e:40:55:de:fd:84:
6b:03:e4:9b:ca:b9:5c:1f:75:60:3f:ae:50:6a:6f:
53:22:29:a9:e6:66:62:c7:2b:c0:a2:62:5c:fa:a3:
58:fb:ff:19:79:ff:33:9e:32:ed:aa:45:f8:45:6a:
1a:79:ec:97:8b:35:bc:b0:d2:4a:89:46:b0:fd:58:
ee:f3:be:bb:1d:10:33:77:fd:07:b3:05:73:1d:17:
cd:d9:b5:0a:66:a3:5d:a9:7a:da:9e:e9:21:10:3b:
1e:dd:f8:17:72:40:61:c9:c4:34:ae:bb:bf:50:7b:
4e:e6:cd:41:0c:e7:6b:2a:73:bd:51:5e:55:d8:ef:
fc:0b:2f:af:4a:fa:f2:66:3f:46:13:92:6d:5d:37:
d6:71:b7:6c:56:6b:c7:7f:0b:82:34:fd:bd:5e:8b:
0a:31:12:f9:f6:cc:f4:48:50:cb:52:5f:f0:2f:36:
ac:51:12:1e:d9:4f:b5:cc:e8:cc:95:c9:9c:a6:be:
a2:63:e9:41:87:8f:b0:1a:b0:7d:51:29:19:92:9b:
b1:d6:12:20:37:b9:e3:6b:a8:27:05:bf:10:d4:61:
2d:30:97:56:3f:74:63:5a:5c:3d:6b:da:a0:c0:ed:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:16:A5:5C:E8:9A:64:29:4C:2F:B8:83:97:0E:94:DE:66:07:EE
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a2:bc:85:c3:fd:be:fe:76:b6:c9:7e:7b:2a:4a:7d:54:dc:
0c:5a:47:57:c5:e8:b8:57:a5:d5:aa:b8:07:b6:a1:d0:cb:0a:
5b:25:1d:8a:4d:74:b6:e7:bf:d3:9d:64:5a:78:5d:11:a4:f4:
79:8b:c4:a4:31:ff:78:7c:24:6d:c1:18:bc:e0:c5:70:ec:d9:
cf:da:1f:a4:df:d4:8e:69:2b:97:b0:92:4d:22:0c:06:14:67:
e9:91:3a:95:a8:ee:11:46:1e:ec:07:97:1a:2a:c5:84:34:47:
0c:44:d6:48:99:bc:37:8a:db:ba:d7:af:df:d5:0e:fc:fd:9d:
c4:aa:16:4f:bb:e9:4f:0a:e7:4b:c7:a3:39:ed:e4:b7:00:18:
81:d5:38:0d:00:39:28:ac:f2:85:c7:75:c6:d6:26:98:b6:7d:
1a:7a:67:d2:65:92:8d:f8:0d:19:d4:56:df:b4:4e:da:88:e0:
fb:ab:cb:b2:24:7e:db:dc:c2:9a:e5:9d:b6:25:69:6d:6c:bb:
8b:80:e2:e5:74:a9:99:19:a2:28:6c:d3:55:ca:44:5b:53:89:
c8:4b:b0:e6:28:d0:1d:7c:a8:46:eb:93:a1:b1:56:e4:1f:e8:
65:c9:4e:ca:25:0c:e5:e1:7c:70:77:8b:7e:73:18:bf:05:0d:
2c:11:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:46 2025 by rpki-client