Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: 5LvkMtF/EPcE6Hg8bUfhIe8rgJlYDKka/PpzLbW7XGQ=
Subject key identifier: B3:E1:39:B5:AE:B7:DC:6C:7D:AE:F7:42:C1:A3:75:5A:EC:2C:58:87
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 019848F7778C8828869D4DBA5D6A8E6F42BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 23:00:34 +0000
Manifest this update: Sat 26 Jul 2025 23:00:34 +0000
Manifest next update: Sun 27 Jul 2025 23:00:34 +0000
Files and hashes: 1: MRvoKs_tNg3-xTMgCbueoBg-yMU.roa (hash: lEsMSNpmyZrLO0pVpESTwzarMUanf5zfZ6XbX+ha5s8=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: g8tcYpQm8t7Je96uZTDvZ1gI+J/ePUkt0aBKL7VBIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:77:8c:88:28:86:9d:4d:ba:5d:6a:8e:6f:42:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jul 26 23:00:34 2025 GMT
Not After : Jul 27 23:00:34 2025 GMT
Subject: CN=b3e139b5aeb7dc6c7daef742c1a3755aec2c5887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:14:27:d3:f8:bf:47:7e:cd:e6:73:92:08:
70:91:1d:fe:e5:25:e5:30:83:64:53:bf:07:7f:a6:
c7:56:8a:d0:8d:29:7b:19:57:c3:b1:6b:43:b3:14:
3b:8e:01:83:dc:47:49:70:93:1d:0c:31:23:d5:86:
3d:3b:60:e3:2a:9a:5f:53:15:ac:2c:53:63:5d:eb:
29:28:dd:91:90:6d:d5:c4:94:49:c8:3c:0c:04:23:
f9:b7:82:f7:cf:96:b7:db:c1:eb:21:4b:a7:b1:8c:
7c:d3:1b:06:4c:a8:1e:91:8e:19:7b:1e:b1:df:d6:
30:fb:3e:6c:de:2c:20:2b:d6:b7:27:56:a8:51:14:
fe:82:4b:07:5a:8b:46:d8:63:b4:a3:30:2a:9c:42:
fa:f2:4e:17:5e:0e:02:eb:d2:1a:cc:7f:a3:34:e9:
3e:20:35:17:97:97:bc:ef:b2:c8:b2:87:ae:15:3f:
41:e2:60:f6:dd:de:8e:94:6c:43:41:16:74:9e:84:
db:07:02:e8:d4:23:03:dc:e8:db:94:a3:56:67:6f:
66:65:20:43:bb:18:e6:1d:c6:a6:b6:20:dd:34:de:
bb:c8:48:df:53:64:8c:0f:c7:3a:65:5a:10:bb:07:
33:ff:77:bd:8b:45:ea:a7:83:1a:57:e7:e5:b7:5e:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:39:B5:AE:B7:DC:6C:7D:AE:F7:42:C1:A3:75:5A:EC:2C:58:87
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:cb:c0:02:cc:ff:6b:4a:fe:12:02:78:09:93:c5:b5:11:
83:ff:f9:b4:9f:66:85:dd:86:93:2a:ee:12:74:f2:e0:c2:62:
7e:9d:87:f5:fd:23:1c:72:a0:c6:62:08:bc:c8:c6:04:c3:d5:
35:d8:7f:61:0f:1b:bb:3c:ae:2b:6c:0b:d4:38:6e:91:9d:24:
1e:80:48:00:8a:af:20:ea:de:d6:95:b3:5f:49:5e:5d:6c:11:
2d:d8:1b:a8:cc:71:c2:3f:3f:3f:d5:00:a9:3e:67:fa:ca:42:
bd:49:09:a4:3d:ef:37:8d:f8:64:52:0c:42:20:51:c3:7a:72:
fa:7c:6d:d0:1d:7d:1c:ca:db:a8:76:5b:90:88:fc:42:7d:d4:
54:e3:50:82:09:9e:9d:c5:25:02:f8:b7:76:e7:c5:0d:d7:54:
72:0e:de:6d:2e:72:ca:1f:a7:ca:23:6d:82:59:12:d3:57:eb:
c1:4e:87:4c:9a:6e:e5:13:1c:10:56:a2:4d:9e:6b:3f:c0:bf:
9b:8c:78:3e:59:ac:f4:e1:55:46:24:b1:45:d4:7c:da:ab:05:
3b:49:50:3c:1e:2d:4c:a2:91:47:af:e1:5c:8f:00:04:5d:21:
a7:0e:f0:3e:ab:42:ae:e2:51:fa:ef:68:50:70:1d:8c:63:ff:
ae:62:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:14 2025 by rpki-client