Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: dXSFYLPI6Bx60VEmqW8vTI9Ns/R1YEMRRkUIzt2l8ks=
Subject key identifier: F7:23:22:9F:3C:FE:37:BD:B3:F4:42:65:B9:51:42:98:68:58:2C:57
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019931914A9406B0A01C29443092F8482C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 15F8
Signing time: Wed 10 Sep 2025 03:00:29 +0000
Manifest this update: Wed 10 Sep 2025 03:00:29 +0000
Manifest next update: Thu 11 Sep 2025 03:00:29 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: SP2NRTQ3FYwQ6A0HzCZ4siIHFoxd3wfeZCxZ7z7Otus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:4a:94:06:b0:a0:1c:29:44:30:92:f8:48:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Sep 10 03:00:29 2025 GMT
Not After : Sep 11 03:00:29 2025 GMT
Subject: CN=f723229f3cfe37bdb3f44265b951429868582c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:90:f6:02:99:07:53:da:da:1a:a6:e7:06:
05:35:cc:04:5f:e0:b9:0d:b2:62:1b:64:3d:b9:b9:
a6:5b:3a:5b:39:ba:07:b4:ca:2f:dc:f7:06:7d:ed:
55:98:df:c1:4a:11:ce:c1:0e:5d:92:32:05:10:99:
1d:94:c8:d8:86:fd:8f:ed:b9:af:c5:a2:c6:da:19:
cc:5d:8e:3e:8b:d9:71:11:4d:be:48:46:18:71:e2:
6a:ab:ae:7a:c5:c3:8f:fc:51:b7:df:b8:3f:b4:8d:
1c:94:de:8c:8d:5a:73:dd:30:e8:46:0b:f5:5d:56:
30:fe:15:ca:15:0a:bf:26:ff:ed:87:56:a4:8a:4e:
40:9e:ec:16:c3:3b:b6:1a:1e:81:ef:a1:3a:b7:5a:
cc:95:a9:f2:07:49:f5:54:08:50:95:e1:ea:b9:23:
4b:6d:2b:74:7c:ed:c0:8d:dd:92:41:61:ad:6f:25:
65:f1:02:bb:d6:90:4d:3b:06:2a:86:cb:d1:5e:06:
10:c1:12:5f:c5:97:02:43:4c:f4:16:1d:2c:f8:f7:
14:48:90:d2:d7:07:11:56:f3:aa:b6:b0:a8:d6:ce:
94:00:74:3b:83:6e:50:fd:b5:c7:56:f0:92:2a:90:
50:ee:43:9f:3c:78:a6:79:08:a0:50:9d:cf:51:14:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:22:9F:3C:FE:37:BD:B3:F4:42:65:B9:51:42:98:68:58:2C:57
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:29:6e:34:16:a7:0e:9d:80:24:d5:00:f7:c4:c5:e3:c5:9d:
d9:ed:50:87:84:14:1f:0d:fb:20:62:36:fc:24:c4:55:c8:e6:
de:7b:f8:7d:b6:d7:f2:99:ab:5a:bb:ce:d1:57:19:9f:55:8f:
f9:b7:fd:3f:05:f6:8b:eb:e3:92:9f:b4:32:5a:44:b2:dc:4b:
e9:a4:71:df:c4:de:f6:1f:c5:fc:99:64:e7:01:61:44:2d:20:
64:57:4e:ae:6d:48:30:67:56:c5:f9:98:ed:e0:4e:c0:77:9a:
70:7e:e9:9a:68:be:51:15:ee:74:36:a8:f3:83:f9:22:50:be:
f4:af:90:10:13:ec:74:86:e1:91:03:f3:49:a8:65:c6:b9:b9:
03:b1:57:b2:fe:77:37:c0:26:38:ea:89:41:2e:d5:80:38:a4:
2d:9a:ad:c5:aa:3e:d9:10:20:26:a8:c9:bd:b8:c0:9f:1e:e7:
05:5e:3b:cd:81:50:ab:fe:17:28:dd:ae:da:84:8b:97:98:f8:
2e:87:2f:01:65:4c:b6:99:90:80:6a:93:fa:a0:29:75:cb:0d:
c4:1e:6f:ee:9f:5f:72:79:3d:43:72:71:75:34:40:8e:8a:2a:
aa:db:4c:08:c1:ff:c6:b4:5c:91:81:c6:11:03:9f:fa:1b:31:
29:bb:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:52:50 2025 by rpki-client