Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: RBUgQsk/yYS3Tw5B1GZkaXffkkAuZ/hsdNmaSHyV0/E=
Subject key identifier: 28:A9:CE:B2:D0:26:FF:B7:29:69:C7:71:30:FF:16:80:58:76:DA:C8
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 019854FCB631EB91D2E8634303D155D1D5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: 02CB
Signing time: Tue 29 Jul 2025 07:01:44 +0000
Manifest this update: Tue 29 Jul 2025 07:01:44 +0000
Manifest next update: Wed 30 Jul 2025 07:01:44 +0000
Files and hashes: 1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: tT2gjn89wLeF0SiNm4P6zqbJiC1roo2wAv0u8jffy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:b6:31:eb:91:d2:e8:63:43:03:d1:55:d1:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Jul 29 07:01:44 2025 GMT
Not After : Jul 30 07:01:44 2025 GMT
Subject: CN=28a9ceb2d026ffb72969c77130ff16805876dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:04:ca:07:a8:c6:fb:61:38:05:0b:dc:ea:
17:6d:d9:5f:2a:41:6b:18:c1:3c:9c:dd:b9:63:fe:
40:53:de:a6:53:1e:64:57:c3:9a:32:1e:f4:77:73:
8e:1f:99:03:8d:db:ca:f5:d3:32:45:56:71:d0:34:
e6:5b:8e:d7:32:8e:bf:d8:af:03:64:90:33:90:c8:
b0:14:54:09:43:4b:75:14:8e:2e:5e:53:92:d5:e8:
80:cf:4a:46:ba:c4:2f:e9:29:29:41:68:f7:ee:01:
6a:bc:cb:8b:d5:21:b2:a3:9c:37:c0:69:f8:d5:56:
4a:ed:97:05:36:33:d5:88:99:3f:69:4a:cb:51:f5:
f8:4e:40:43:cf:22:ac:4e:85:49:ab:87:d5:01:32:
af:e4:4d:e1:28:68:f5:ef:fd:58:f3:99:0c:24:4f:
85:aa:60:c5:a1:e1:1f:b9:ad:83:7a:4f:e6:05:2a:
ac:87:29:18:15:7e:82:4b:2e:24:38:09:03:cd:af:
e7:d2:0f:6e:b9:92:ae:5b:f6:e1:13:8c:77:62:1e:
d3:44:57:72:57:f3:0e:ab:6f:b8:8f:23:da:3f:5b:
f7:79:8f:6f:8c:5e:70:37:1a:6e:65:ad:3a:23:5a:
8d:43:83:0d:85:11:4f:7e:8b:bd:1f:ac:99:a6:f4:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:CE:B2:D0:26:FF:B7:29:69:C7:71:30:FF:16:80:58:76:DA:C8
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fa:a5:37:99:be:f5:ec:b4:23:ce:4c:b3:5c:2a:7b:b4:56:
25:7c:8f:d7:96:f4:c6:a2:7f:18:26:54:98:9c:30:b1:bd:a2:
6b:a6:20:20:40:9c:d4:fa:77:74:39:d4:9c:60:61:82:79:0a:
83:10:35:40:ea:2e:09:b8:24:ad:cb:c1:d0:7a:df:57:35:35:
bd:95:49:8a:ab:f9:d3:84:40:60:c5:96:a5:9c:35:34:09:43:
98:3a:85:17:8a:4d:c3:96:ca:13:7e:c6:90:1c:cb:1b:c1:75:
fa:97:f6:1e:b3:8d:12:87:f5:77:12:d2:66:71:bc:06:73:d1:
c3:d6:9f:67:e5:dd:85:d3:d6:0a:68:bc:cf:71:fb:d9:4b:28:
82:d2:e7:83:9f:a0:be:33:60:22:f1:c4:6d:07:3c:09:54:c3:
a8:b4:55:c1:3f:86:70:99:e3:70:63:c3:a3:3f:7d:01:20:54:
4d:53:4b:d7:2f:f7:75:3f:8f:bc:f9:b7:d1:e6:44:4a:e3:a1:
c2:df:db:79:70:cd:3a:e6:e7:e5:8f:ff:23:f3:82:ce:1a:20:
ee:d5:1b:52:54:e9:78:c2:a0:2b:9f:1f:be:eb:3f:d0:89:0a:
44:51:6f:b6:1e:bb:e5:69:a1:78:66:71:96:0f:38:6d:4b:af:
23:b2:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 09:34:25 2025 by rpki-client