Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: XzD82kcPedHmLO/GM0s8W6+cmzMNpCKR+43jcfyVXjI=
Subject key identifier: D3:D0:05:45:C3:79:E3:6F:0A:E6:E4:2A:AB:E9:1C:A7:44:3F:67:89
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 0198D54E747F2937C1546EA34B7FA8FDEA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1343
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: +oSrUpnUyFkAbnRNHdr2V8QkSnqihVvWLsU8SH2JwzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:74:7f:29:37:c1:54:6e:a3:4b:7f:a8:fd:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=d3d00545c379e36f0ae6e42aabe91ca7443f6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:06:7c:bd:25:16:1e:80:39:51:4f:4c:8f:
ea:0a:0c:ed:bc:1c:5e:61:2f:68:56:50:a5:d2:a6:
09:e7:52:9d:9b:9f:05:d9:40:fe:85:32:c6:cd:b8:
6a:61:f9:93:dc:77:06:74:62:43:d3:50:71:dd:ec:
45:42:45:88:d0:4e:d9:67:93:28:82:7b:2b:10:9b:
bd:35:7c:b5:59:c2:ab:ce:f2:82:09:62:2a:bc:03:
fd:52:16:88:34:e9:ce:5c:0a:65:54:8d:3e:a6:0f:
18:19:4a:aa:74:5e:73:b2:10:28:a5:4c:a8:c2:19:
bd:15:a1:12:7c:af:84:cd:e1:cd:df:65:c7:35:1d:
b2:31:20:5d:6f:61:69:0c:e7:e8:f2:26:cd:4e:60:
75:23:1c:cd:90:69:33:e6:a1:ca:75:22:9c:eb:2f:
07:18:76:be:3a:02:ce:dd:21:52:93:d0:b8:69:8d:
82:06:6a:03:42:2a:60:a5:52:a2:9a:c7:c8:1b:54:
fc:13:55:a6:e1:81:89:68:97:d2:9a:a4:60:9b:17:
0d:d7:1b:e5:e4:9b:fe:95:28:b8:a7:17:e0:90:3c:
c7:d5:7e:8a:29:6a:de:a6:03:f6:4a:f4:b6:bb:c7:
8b:e1:22:b7:7f:31:55:d4:87:c9:d2:02:25:1c:0c:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:05:45:C3:79:E3:6F:0A:E6:E4:2A:AB:E9:1C:A7:44:3F:67:89
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7b:8f:87:de:27:c2:bf:34:97:75:e3:fc:86:7e:2c:1a:0a:
a6:46:1b:f3:cd:97:5c:fe:8a:46:97:bb:f7:a8:21:08:72:67:
a5:a2:3a:fa:82:3e:b1:f5:16:7e:3a:8d:e6:9e:c2:ee:e9:79:
8e:5a:d2:b0:8c:de:29:6b:16:61:3f:91:51:f9:d5:f5:56:41:
cb:a2:98:a2:d6:33:9d:2a:f6:8e:04:a5:56:a4:c3:a7:7e:c3:
97:58:d7:d1:ea:86:9c:fa:06:61:db:89:bc:15:9b:89:2b:a1:
0d:57:a3:33:b4:4b:25:8f:c3:36:df:25:4e:29:f2:b0:2a:e4:
6c:84:b8:a2:f9:f6:cc:1e:74:40:4c:38:af:e1:2d:e6:8a:db:
29:0e:6b:30:08:bf:c9:5c:e5:b6:27:86:cc:4a:9e:32:42:c4:
44:f6:a8:6b:5f:f0:ca:ba:c4:a5:38:0b:f7:eb:2a:b8:4e:60:
89:bf:f2:17:ba:08:78:0e:16:52:67:e2:2a:bc:7f:75:23:89:
41:0a:25:02:d4:68:aa:67:b6:b6:26:20:2b:19:82:36:c6:58:
1b:3f:b7:04:4a:ad:4b:52:d1:f0:fd:96:56:b7:34:38:45:de:
c3:4b:12:7f:01:0c:1a:95:82:c9:96:7a:2b:f8:02:1d:12:e2:
a4:74:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:24 2025 by rpki-client