Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: lPeqqohA0l7WAkizwBS9UcT8dg6TkxdVPYv70xYY6J8=
Subject key identifier: 5F:CB:84:24:E4:66:48:34:29:93:C2:01:52:B4:FC:7B:58:64:CB:3A
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 0198D5838094E91E35524C7710FD5233A029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 053A
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: fBEt2jCdhN7XC+jePPfrF4Achqb2FPFpZ1DGUTDaRnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:80:94:e9:1e:35:52:4c:77:10:fd:52:33:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=5fcb8424e46648342993c20152b4fc7b5864cb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:be:b5:d3:cd:79:29:da:cf:55:a9:52:67:
39:ab:f2:4f:31:c0:fc:7a:0b:1a:a0:33:3c:0a:37:
2a:b3:b7:a2:b8:04:55:f6:00:d0:3e:69:7d:a2:14:
bc:f4:de:97:f0:fe:31:a8:0d:6e:4f:12:68:b1:f2:
8e:0c:3b:b2:56:bb:a7:f9:ca:d3:01:8d:3c:10:2e:
08:01:24:16:ec:4e:f1:41:d8:5a:98:dd:e1:98:18:
df:23:ef:3c:fa:4a:de:c7:fb:9e:f9:32:fd:31:74:
52:3c:e0:ba:ad:8f:d0:61:66:ea:94:87:96:56:8c:
ef:97:1b:5c:6b:d7:27:cf:91:c3:36:f2:4c:69:2a:
b2:37:93:ac:20:7f:06:d9:89:68:59:29:77:a4:a0:
6c:b0:6b:1b:3f:f4:92:d1:24:4a:cc:10:50:c5:df:
ca:4a:54:c1:29:f1:f0:7a:e3:80:4b:e6:22:88:3b:
63:59:c6:83:a8:da:7d:04:d2:67:3f:cd:ef:dc:62:
f0:a6:7c:b4:12:03:47:9e:9d:1d:8a:72:ba:77:8c:
ce:3d:b2:94:42:07:d8:87:43:24:b5:9d:dc:58:45:
75:ea:4d:2d:ea:e6:e7:20:87:f9:bb:40:06:6d:09:
7d:a5:05:5f:d6:60:c0:82:a7:88:21:5a:ac:66:f5:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:84:24:E4:66:48:34:29:93:C2:01:52:B4:FC:7B:58:64:CB:3A
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:40:8b:f2:4a:ee:10:c5:11:03:27:89:4e:5f:6f:be:26:
29:46:94:d5:a4:03:e8:f1:29:14:9f:73:a5:d3:23:b6:40:61:
07:ca:05:25:b5:96:80:4c:36:12:22:b8:ba:78:4e:fe:09:f1:
db:88:8a:1d:6f:7f:9d:39:59:4f:eb:6c:c6:d1:24:c9:ce:61:
7f:05:ba:4b:40:22:15:8e:ae:80:5a:e1:7e:05:67:f3:85:60:
2a:2d:55:2d:7b:cd:b5:c4:65:86:18:0e:ac:16:87:f9:a2:6d:
cd:3d:56:5d:a7:91:83:22:b6:94:bd:dc:74:79:27:76:05:92:
56:ee:2c:65:67:0f:80:21:d0:01:52:4b:16:6a:0c:84:59:d3:
be:58:68:64:db:55:35:8e:08:15:f3:d0:5e:58:e0:66:46:db:
58:6d:81:8c:0c:68:65:a8:7b:d3:81:cb:12:51:17:73:ca:41:
ec:fb:29:17:5b:76:a2:0f:91:8c:4a:37:7a:9f:5c:d2:17:e9:
48:9c:87:09:fd:52:66:e2:52:ae:5f:25:e3:37:91:90:17:31:
2f:1e:34:9b:d7:1e:a5:04:a1:6a:3b:9e:87:35:f2:4d:98:8f:
d4:ec:fb:fe:c1:a2:05:13:07:a3:8b:b1:27:1f:fa:51:78:84:
5f:b8:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:22 2025 by rpki-client