Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: 1miBaxFKZFd00vUOLSs1p6bFHPQyFhhguZE21ADLFwc=
Subject key identifier: 41:AB:37:C2:FA:03:8A:A0:9A:29:79:1B:A1:FE:CF:1F:04:A9:D7:1C
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 01984889AE7458C6737BBFC4F51CBD141261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 038F
Signing time: Sat 26 Jul 2025 21:00:39 +0000
Manifest this update: Sat 26 Jul 2025 21:00:39 +0000
Manifest next update: Sun 27 Jul 2025 21:00:39 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: F2hBH3wqe4HnY1UdM1PceDDfIBzhEjQD0KCdoaN0ViE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:ae:74:58:c6:73:7b:bf:c4:f5:1c:bd:14:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Jul 26 21:00:39 2025 GMT
Not After : Jul 27 21:00:39 2025 GMT
Subject: CN=41ab37c2fa038aa09a29791ba1fecf1f04a9d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:95:6e:4a:ed:44:e9:d8:f4:89:02:db:9d:
47:61:8b:2f:a5:3f:44:c2:60:91:6e:0f:a5:9b:a1:
b4:af:af:8e:08:6f:3e:ad:8e:ed:b0:73:c6:1e:48:
fc:8b:43:94:31:a3:47:32:70:ec:b0:92:ea:92:df:
ac:d2:01:cd:64:89:c3:92:99:2f:de:33:35:ea:c6:
6e:5d:98:60:32:57:70:72:84:45:7d:0f:60:df:c8:
b1:3c:64:f2:ff:c8:65:59:1b:14:5a:2b:60:ef:9a:
77:8d:43:25:40:ca:99:90:f6:91:fc:f0:e8:f6:c0:
82:8f:64:7a:af:61:3d:30:0d:3b:16:36:0b:2b:d3:
9c:87:b0:24:64:70:f2:29:58:f6:13:c7:98:97:78:
35:63:7d:7d:1e:61:06:be:5b:c2:06:84:84:8e:ff:
05:88:ba:ea:81:4a:3a:01:70:62:82:b9:f5:e4:41:
6c:a3:0a:2c:97:fb:00:e3:aa:4f:d5:9a:fc:dc:f0:
77:12:cf:7a:79:30:9c:6d:e8:c4:81:06:55:94:fa:
99:9d:8d:ba:aa:05:d1:80:fe:46:27:8e:15:29:7c:
7a:22:4f:df:a2:d7:df:39:f2:60:7f:ca:1c:a6:ac:
b9:f1:4a:a3:36:ab:6c:c5:01:9e:29:6d:b0:8c:c2:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:37:C2:FA:03:8A:A0:9A:29:79:1B:A1:FE:CF:1F:04:A9:D7:1C
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f3:7a:cf:9b:d0:f2:bb:69:52:1a:19:46:af:cd:41:2c:11:
40:95:8e:62:27:70:df:f3:92:a5:4e:19:18:7b:74:2d:7d:9f:
53:25:88:fa:30:35:0d:3b:e0:9c:02:bd:ed:df:77:8f:66:a0:
02:20:d8:fa:25:41:0b:86:a6:c5:c6:c3:c1:f2:4f:37:e5:62:
50:69:fd:08:71:66:fa:a5:2d:14:27:54:39:8b:3b:4c:3d:d8:
db:f8:e0:8a:98:a8:22:12:ce:1d:18:c6:90:f4:62:1f:36:48:
ee:c1:da:ed:a8:02:28:c2:92:06:88:01:10:6d:a6:cb:39:5a:
cf:93:7a:4b:18:4d:61:1f:0d:e7:33:57:0f:78:07:70:e6:bf:
ca:1d:6d:96:80:36:d2:08:35:b3:a7:ca:c5:dd:f7:37:b0:77:
6d:56:04:45:6f:39:8f:4f:96:cf:f7:92:c6:b9:6b:b0:7e:33:
a5:91:8e:2e:20:46:cb:ff:f4:f1:e8:68:ad:d6:86:12:66:66:
5f:76:9b:8d:12:2c:7f:6a:0c:3c:2b:1c:ba:8b:ae:ae:07:16:
87:e9:03:04:47:da:01:0a:76:1c:4f:b3:b6:e3:01:0a:e4:9b:
bd:b1:2c:5c:10:69:e9:f0:ea:03:54:9a:ab:c3:1b:2b:48:ba:
a9:ba:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:49 2025 by rpki-client