Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: ZPwpVx2QSGyfYPgWXJMdlaSOt7IeH5AUpQpToCTDBbI=
Subject key identifier: 18:24:FD:2C:AC:1D:1B:47:41:F8:F3:B8:90:28:7E:1B:6E:86:B6:BB
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019921E7DB520BE0E67D3522E67559743DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: n1cEeQPl90nBKaQ2rDL1G7D/Umr95bUsay9R3w+TmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:db:52:0b:e0:e6:7d:35:22:e6:75:59:74:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=1824fd2cac1d1b4741f8f3b890287e1b6e86b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:9e:a8:65:0e:a9:39:a1:0d:7f:74:a3:37:
02:f7:d6:b1:60:fb:8e:98:b4:6f:d7:1e:54:b0:3f:
f4:6c:04:31:b6:ee:08:e1:33:5f:e6:7f:65:75:9d:
2b:83:c5:95:80:83:0f:7e:30:53:82:ca:ef:2c:fb:
25:66:07:a7:6d:78:94:b0:34:f4:64:ee:10:35:0c:
3a:ba:e4:86:9c:b4:5e:51:68:b3:ab:65:7c:1b:43:
0f:8f:ff:08:2a:2b:a5:ad:15:77:97:6d:6a:f3:21:
3c:78:08:ea:4b:e2:e4:3c:ea:6b:91:df:f7:04:30:
43:b4:03:b4:fc:fd:d5:63:5e:8f:85:9e:87:98:73:
d7:fa:9e:fe:d7:9f:72:38:60:8c:05:3f:19:43:8b:
a2:82:4b:83:93:41:12:17:30:45:60:a0:95:0a:c5:
59:b7:6b:fd:5f:25:e2:3d:0b:45:c2:42:bb:ce:e5:
4f:39:33:49:b1:3f:89:d8:4c:db:3a:f8:90:6b:6b:
1a:18:d4:10:bc:78:94:5b:96:73:cf:b7:b0:6d:50:
4e:28:8a:5a:34:1e:46:1f:57:0d:b1:d6:9c:e6:5a:
f6:35:de:45:2a:74:10:63:88:fb:d7:0a:c7:cf:4e:
69:f1:cc:88:45:92:8f:51:32:00:97:8a:cf:52:c6:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:FD:2C:AC:1D:1B:47:41:F8:F3:B8:90:28:7E:1B:6E:86:B6:BB
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:7e:e4:df:cf:ca:5c:66:b6:aa:f0:a5:a2:ed:a2:37:2a:
1e:92:3f:8c:26:43:a0:f4:10:13:c2:ca:46:64:d4:6b:a3:a9:
bc:33:1b:ff:07:05:f2:a9:e9:6c:71:76:34:2c:35:6c:ed:fe:
a1:15:9c:4e:e4:e4:9a:7c:7f:65:ed:0a:d5:f3:aa:3c:7b:53:
e9:ba:c5:e4:f9:5f:25:17:c7:87:92:38:63:7e:23:7c:30:89:
5c:2a:e5:2d:10:41:96:92:5f:28:e8:b0:8b:c5:32:cd:0d:92:
28:10:99:88:97:d3:f4:d5:35:ad:29:2d:30:53:8b:cc:a5:d3:
62:4b:55:68:87:ec:24:8d:84:3e:ad:07:ac:c6:8b:10:60:3d:
87:38:ce:8f:6b:6a:b7:3a:0d:da:84:3a:67:de:77:d3:8c:06:
e3:ab:da:0c:21:9a:75:c3:5c:76:50:75:57:ef:9c:7b:f0:4a:
ed:06:16:0e:84:41:20:b5:07:87:74:19:ff:0d:42:d6:48:2b:
b9:cf:60:e6:d7:0f:7a:b7:52:24:10:d3:19:5e:5f:d2:1f:62:
50:eb:e3:7a:0c:9d:d4:a5:1d:72:8c:b4:64:49:d6:7f:96:d0:
db:dc:1f:49:c5:be:5d:98:6d:77:2f:1c:eb:3c:ba:78:6f:a2:
9e:7f:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client