Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: Ohu6yKkmzy5qtguU4/Jtqd6eTy9u5To3B2osNt8dA78=
Subject key identifier: A6:3A:29:F3:64:80:F6:57:34:D2:1C:84:FE:C6:B5:45:C4:95:D9:4C
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 0199221E63313449331FB9143BD155FAADDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 04AA
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: dLZJ2ZRter6E0WypC7GN5QnT5lxzPHj8kXHaCPJ4qfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:63:31:34:49:33:1f:b9:14:3b:d1:55:fa:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=a63a29f36480f65734d21c84fec6b545c495d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:1d:4c:69:4f:a4:b5:94:9a:93:f2:6e:ee:
8f:ed:c3:26:68:fa:bc:f8:b2:6a:3b:b0:df:4f:17:
5c:dc:56:a5:ed:f2:90:23:d5:4a:4e:fe:7f:e2:bb:
fc:67:9f:5f:0c:32:6e:6f:3e:90:77:10:c6:43:5a:
a6:a4:b0:01:47:26:be:45:ba:22:5e:88:91:61:7c:
0f:7d:0d:20:20:21:2d:ad:c3:09:6f:84:fd:0b:6b:
2c:94:a8:75:b0:66:47:64:7e:52:8c:46:2b:ff:8c:
b1:cb:79:94:a5:7f:28:37:1a:8f:3a:04:19:fc:cd:
00:d3:ef:3e:40:c6:2c:28:e3:78:88:79:1e:f8:7b:
c0:29:ad:6f:3f:f6:4e:7e:c5:63:c0:f4:56:20:31:
74:f6:31:4a:c3:e9:f8:da:02:dd:44:ed:93:8b:6a:
49:8c:ff:3f:bb:c7:03:3f:66:10:0f:3b:da:69:b0:
fa:6e:ef:02:27:a6:57:72:2b:ea:bd:3a:70:55:85:
cd:91:ac:3d:98:62:4d:1b:15:9b:73:70:32:77:ab:
8e:5f:f2:8e:46:0f:65:4c:ed:d9:a7:79:81:0f:60:
9f:19:6d:ca:33:5e:5d:76:a8:39:22:d3:90:97:38:
49:48:79:24:38:3b:df:dc:96:59:d6:41:4e:3a:87:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3A:29:F3:64:80:F6:57:34:D2:1C:84:FE:C6:B5:45:C4:95:D9:4C
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:69:18:41:3f:dc:71:02:19:f1:20:e9:34:7d:6a:cc:b4:7b:
78:c0:13:5f:44:1b:e3:76:78:e5:1a:dd:e5:e1:b7:56:ad:7f:
d5:e3:00:31:bd:91:4e:d7:d9:59:85:ad:32:93:54:08:06:5f:
98:3b:49:7d:b0:d5:4a:db:9d:67:08:a1:17:2b:78:26:f7:e3:
d4:f2:42:4b:89:1b:65:e4:08:14:9b:2d:2d:04:2b:c4:56:e5:
9f:2f:a3:1d:c8:b1:b0:a3:4f:b7:36:8d:7c:8e:4c:fb:11:db:
f3:88:3e:12:c7:39:49:74:6f:e4:b1:5d:d9:da:e2:b7:aa:68:
1e:64:73:cf:2f:9f:4d:17:9a:02:b1:a1:27:d4:54:86:22:15:
d8:be:10:96:fe:0a:69:48:f3:d1:e3:ca:d1:ce:83:40:ac:08:
63:54:b3:ba:dc:0e:19:b4:9c:c3:9c:a6:5c:5e:1b:a4:c1:a7:
0a:bf:52:7d:c7:34:f4:32:4b:0d:37:66:da:da:b4:d3:53:82:
ec:fd:3a:7e:7b:c0:a5:4a:d1:af:33:2b:db:1c:41:f8:cc:c9:
56:e2:75:df:a1:64:52:35:7a:67:57:2f:a5:05:c6:19:31:91:
6c:36:1d:d7:6c:d4:62:99:9f:1a:06:fb:ba:b0:b0:76:45:c6:
6e:35:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client