Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: MFmes5ITdYAVscK1WWlD2/hF9tpQFiIZtFAFVZ+UZ7U=
Subject key identifier: A8:06:A1:48:3A:8E:97:9A:E9:AB:CB:A8:A5:68:F3:26:3B:A1:1D:AA
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 01983E3C8AB73A2D07FBD28EDA8171AFA17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 10FB
Signing time: Thu 24 Jul 2025 21:00:11 +0000
Manifest this update: Thu 24 Jul 2025 21:00:11 +0000
Manifest next update: Fri 25 Jul 2025 21:00:11 +0000
Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: dT68+DlZvAwqw+ejeCsunFNMcDXLRFxrI05WEy+GPeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:8a:b7:3a:2d:07:fb:d2:8e:da:81:71:af:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jul 24 21:00:11 2025 GMT
Not After : Jul 25 21:00:11 2025 GMT
Subject: CN=a806a1483a8e979ae9abcba8a568f3263ba11daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:a5:96:c1:d9:3b:cd:a8:3a:2f:73:19:2e:
70:26:6a:87:1f:9c:24:42:f8:91:78:0b:97:82:89:
de:00:49:b9:2f:bf:8f:4f:68:87:72:e2:66:33:58:
26:1f:2a:5d:01:c4:17:78:a6:8e:6a:03:f3:11:75:
e3:3e:89:1a:33:68:e3:3d:66:24:ee:7a:5e:81:81:
c6:e5:80:ad:76:4f:c9:60:68:93:0c:7a:8e:9a:12:
76:63:f3:1b:09:a4:84:98:6e:c8:36:74:73:57:8c:
4b:b1:65:49:24:75:48:bc:de:1d:7f:a0:6c:4e:e9:
75:fd:ec:9b:9f:2a:83:b4:fd:2e:7b:63:5d:b9:34:
2d:6d:0e:d9:b7:f9:56:0c:e6:8f:65:3c:5d:a2:f1:
57:60:20:b6:04:28:be:fa:ae:09:6a:b8:e0:36:be:
06:2b:1c:ce:7a:78:7f:b2:d7:8e:52:17:59:13:33:
91:f1:a2:c3:cd:52:aa:96:a8:f2:a1:da:19:70:8e:
b8:83:9a:27:31:2f:99:d3:42:7a:0e:38:da:26:90:
89:d6:16:51:ee:ce:13:a8:9a:3a:08:61:25:f4:d3:
ee:a6:f7:08:0d:a3:44:7a:ec:9f:08:00:77:42:17:
d3:eb:61:2f:6f:6b:b8:55:43:52:8f:5d:88:ba:46:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:A1:48:3A:8E:97:9A:E9:AB:CB:A8:A5:68:F3:26:3B:A1:1D:AA
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1f:c0:d3:62:fb:4a:10:fe:ae:73:65:ae:7a:fc:c0:aa:5c:
b8:94:76:21:52:9c:51:24:43:72:8b:e6:b2:43:2a:7b:b7:85:
27:8c:d4:8a:6e:52:f3:6e:0d:bb:fb:7a:69:67:11:71:41:b4:
f8:83:39:1b:e8:e4:ab:30:bd:11:ef:01:0c:b5:b9:32:74:d8:
51:07:a6:d2:2c:fe:d7:ef:61:be:ba:b6:63:c8:f1:0a:a1:3d:
a0:e7:a1:a5:df:d6:04:a4:66:a4:af:95:70:72:3a:a7:3c:78:
5f:ae:f2:f6:2b:80:ee:4d:14:4c:41:47:30:e7:10:6b:68:ac:
60:06:7b:46:a9:18:21:15:54:8e:d8:80:2e:c4:ce:e0:c0:f8:
3f:00:2f:81:2b:71:d3:91:59:43:89:67:e4:cc:a2:b1:e8:4c:
61:21:dd:2a:e2:03:e4:be:73:b3:c9:73:9e:19:63:51:c5:d2:
0d:15:c3:04:0e:3e:81:9f:b0:78:bb:ad:5f:d6:05:1e:ff:04:
44:72:b8:80:8c:6d:da:28:e1:58:78:47:44:ec:27:76:7e:c3:
46:1f:e7:29:57:c3:5d:f6:d8:b9:83:d9:7e:cf:ea:be:be:ff:
e9:15:c9:c1:c0:4c:5c:80:5b:78:36:eb:16:e7:b3:d5:3c:f7:
52:fd:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:19:42 2025 by rpki-client