Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: FG3JqabkTc4TEcArDiARf9nBdKLsgi9emN8WUh6qd/w=
Subject key identifier: A6:6F:8C:2B:09:91:A6:DE:62:8B:5D:B7:55:4B:38:33:DE:1A:8E:24
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0198D4E0BF15F7635E60E1207214286E8410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:35 +0000
Manifest this update: Sat 23 Aug 2025 03:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: e5AFXCGqxup0jQzZ4E3uNbvoTfNBMxv6yVJYWiy6p08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bf:15:f7:63:5e:60:e1:20:72:14:28:6e:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Aug 23 03:02:35 2025 GMT
Not After : Aug 24 03:02:35 2025 GMT
Subject: CN=a66f8c2b0991a6de628b5db7554b3833de1a8e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:b3:0b:67:17:a5:99:c7:6c:2c:bf:1a:80:
b0:8d:e2:13:93:90:34:4c:a6:16:bb:3a:0c:c1:12:
c0:61:89:0f:19:a4:3b:bd:e1:8f:db:15:12:89:a7:
7d:ee:d2:e5:ac:6f:04:f9:63:e7:3e:33:d4:5b:23:
96:0f:0a:c2:cb:93:31:2e:a2:4b:7d:f5:55:8d:20:
a3:aa:e0:f6:a0:7c:72:38:e8:2d:51:62:a5:ef:78:
10:2a:60:97:1b:f8:bd:99:a2:7d:99:01:82:f8:21:
f3:c4:3e:e5:b3:8a:6f:89:29:80:b8:01:40:56:5f:
50:9a:6e:f8:d4:04:c9:2f:79:29:9d:5f:ea:9a:63:
02:48:a9:63:6b:1c:fe:61:ba:36:05:c7:ed:2b:f8:
86:57:f3:8e:2b:16:b6:df:ed:c8:18:9c:4b:2b:c4:
6d:54:cc:ce:33:60:22:b4:ae:13:c2:fb:2d:4d:17:
0e:af:16:c9:dd:ac:5d:9d:95:6a:1c:8b:a0:8d:cf:
c9:58:37:9f:85:c9:57:18:da:86:61:bc:85:90:19:
b8:3e:49:ac:cf:fa:80:fe:4c:52:4b:09:78:bd:ca:
db:1f:f3:73:2a:d5:1c:a2:9c:3b:b5:57:89:97:40:
4b:a5:8b:44:32:20:36:c7:89:bc:5a:ac:02:58:47:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:8C:2B:09:91:A6:DE:62:8B:5D:B7:55:4B:38:33:DE:1A:8E:24
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f9:89:30:e2:0a:91:20:79:b7:a7:47:e3:6d:62:2c:c8:b5:
71:9e:f6:88:bf:d5:be:9f:3a:fe:c0:36:2b:4e:c9:c1:bd:87:
98:24:41:1c:4a:f2:09:41:26:26:bc:59:24:a5:3b:fc:db:1e:
74:a3:2a:4f:e9:8a:05:89:08:09:a0:9a:88:d3:fe:4a:10:eb:
1d:6c:ff:32:ce:29:fb:83:23:a2:15:21:50:68:ad:19:3a:e2:
fc:65:48:62:de:32:87:da:c7:93:c1:36:45:d3:e3:fc:9f:5b:
48:bb:72:50:33:cb:58:42:ea:c7:de:91:2d:ab:d0:d7:82:77:
d8:93:e6:17:2d:d6:ce:6e:4d:75:9d:75:42:bc:ef:0e:b2:9a:
c5:8c:6f:cb:b5:94:25:bb:55:2d:dd:27:1d:15:08:a8:0c:74:
44:57:13:e4:05:c4:28:b2:65:10:fc:3b:d9:d9:9d:b1:25:64:
b4:cb:95:91:86:08:14:c7:40:b0:9e:16:47:37:c9:4b:c7:a5:
55:54:48:df:0e:dc:83:8f:56:55:bb:bb:0d:a7:cd:e8:a6:e0:
a8:92:ae:e9:45:fa:d6:5e:e6:b4:ad:35:df:e3:c0:a8:d0:2c:
a8:91:59:bb:0c:c5:e0:d8:93:f9:1d:a3:ad:2f:eb:3e:85:71:
fc:d9:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:14 2025 by rpki-client