Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: YVYaGOex3sCa8MUTaXgT+NIaV/4SQngVHIOj/2GEOLc=
Subject key identifier: FD:12:9B:E2:72:DF:B3:E6:78:32:CE:90:1E:97:30:B4:9A:27:A8:B3
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 0198537BB4D704B7B72E999376C0FCAF4BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1616
Signing time: Tue 29 Jul 2025 00:01:12 +0000
Manifest this update: Tue 29 Jul 2025 00:01:12 +0000
Manifest next update: Wed 30 Jul 2025 00:01:12 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: ozp/DSbwd9SPwp3/AvKZk1rhtZb4fl/RJdlkEJAS/q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b4:d7:04:b7:b7:2e:99:93:76:c0:fc:af:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jul 29 00:01:12 2025 GMT
Not After : Jul 30 00:01:12 2025 GMT
Subject: CN=fd129be272dfb3e67832ce901e9730b49a27a8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4a:12:e7:ed:3e:27:bc:24:a6:46:7a:6a:ce:
ce:8d:d5:eb:83:28:fe:f4:90:5c:3e:bf:c8:be:99:
1b:e6:24:53:2b:45:35:75:df:62:62:df:35:f4:b4:
0b:8b:11:85:8e:1a:3c:f4:ee:bd:78:51:8e:cc:dd:
4d:da:f6:dc:6e:72:88:7d:94:be:c1:63:ea:06:eb:
61:11:61:2a:35:82:61:4a:e2:e2:03:28:3e:81:4c:
f5:2d:1d:aa:28:4b:83:0c:37:76:90:57:8e:f4:8c:
2c:86:39:44:92:ac:ab:f0:9d:7d:46:b2:b1:05:c3:
70:ae:fc:d3:38:3e:db:50:0b:ef:f7:c3:2f:27:0e:
4d:eb:74:b1:b3:ca:40:df:f2:44:69:33:5e:20:a3:
f9:aa:62:1b:43:f5:a5:3f:03:1b:86:e3:26:26:bb:
fb:0f:c7:83:bb:33:e3:1b:a1:6f:ae:37:90:3b:06:
58:90:6c:02:39:68:b5:15:62:43:cd:e8:07:d0:3f:
50:d0:b7:28:a3:d4:b4:bf:9d:3f:ed:4b:59:42:99:
8d:ec:67:9d:08:fc:0d:23:96:ef:83:34:35:1a:a6:
e0:ff:e3:20:b3:86:66:f2:7b:b9:da:ad:d4:f0:1c:
a7:76:b8:71:28:c8:00:e2:e2:11:01:88:4d:11:95:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:9B:E2:72:DF:B3:E6:78:32:CE:90:1E:97:30:B4:9A:27:A8:B3
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:26:9c:70:aa:a2:4b:ee:52:61:29:7b:53:7d:7d:56:35:
17:32:42:9b:fd:5b:9c:e8:d2:cf:86:9a:14:56:4e:a0:a5:07:
e6:f5:85:b4:82:5f:e1:bc:7e:ad:97:75:3a:31:f5:cf:4e:c5:
82:85:59:8a:59:84:59:dd:55:0b:fe:ef:c1:8d:5f:ba:86:10:
7d:36:b6:21:29:8f:91:7a:b1:3a:24:19:8c:e1:47:0e:bc:94:
d6:3e:c2:90:10:a3:75:34:f0:28:cb:c4:6c:5f:9d:70:6d:85:
ed:aa:df:fc:5a:a2:33:08:e5:7c:b2:38:d4:45:31:10:7d:fc:
c5:da:45:62:28:0d:91:12:37:a5:62:f8:67:aa:65:c2:c7:43:
c3:55:3c:a2:95:59:e7:bd:13:70:46:d9:da:8d:f6:67:b1:4e:
db:a8:81:65:30:25:81:70:2c:b0:27:59:aa:a9:e5:a6:79:fc:
b8:25:ab:00:39:0d:49:85:f2:08:d5:46:28:c5:4a:dd:b0:1c:
78:46:fc:00:64:e7:cd:4f:ef:db:f0:18:4b:02:e0:ed:ff:a1:
df:dc:cf:d8:da:61:59:fb:f2:0a:d9:23:8b:13:d1:08:2c:2e:
5c:c7:3b:02:fa:8f:11:6d:56:8e:19:f6:c3:59:1e:38:34:2e:
aa:99:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:23 2025 by rpki-client