Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: HeD9vF15kphsMAanFQrChpPT7QiLGPrkelKV8d0js0A=
Subject key identifier: 11:23:0C:BE:9D:72:DC:A8:2C:A9:DC:D5:66:D1:63:83:A8:3E:79:73
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019923A024F50E682FA5AA1CAF2BCB68AAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 086F
Signing time: Sun 07 Sep 2025 10:02:01 +0000
Manifest this update: Sun 07 Sep 2025 10:02:01 +0000
Manifest next update: Mon 08 Sep 2025 10:02:01 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: dlxyQicLeuqMBJBsSPfBoz9DFPoC6paxBgh4kXByqWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:24:f5:0e:68:2f:a5:aa:1c:af:2b:cb:68:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Sep 7 10:02:01 2025 GMT
Not After : Sep 8 10:02:01 2025 GMT
Subject: CN=11230cbe9d72dca82ca9dcd566d16383a83e7973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:3c:c6:62:04:8e:4e:78:b5:82:a6:79:a5:
4f:90:47:8a:0b:ef:bb:bd:03:a8:13:54:7e:cd:3d:
28:82:82:fa:3b:5d:a6:f5:d9:e9:69:4f:41:d0:f7:
5e:b8:ad:cd:19:59:0d:11:45:7c:f6:14:82:9c:3a:
49:14:3b:56:19:5a:80:2f:a0:22:2a:96:53:85:54:
6b:4d:7d:37:46:06:5d:70:d7:fb:ed:33:24:55:0c:
38:19:aa:c9:31:86:bf:64:88:79:be:5f:71:49:44:
3a:0f:7d:24:a3:18:2d:c1:65:7e:ac:01:38:7a:35:
66:b7:00:8b:fd:58:00:82:54:55:15:ea:5e:99:ee:
f1:32:98:20:3c:62:8f:27:53:d5:43:82:33:75:59:
6f:c8:31:82:1a:7d:d0:01:9f:96:55:d6:43:c6:71:
38:44:3c:d5:de:57:eb:3a:b8:43:e8:4b:ba:be:ec:
51:75:59:c6:94:1b:52:94:73:9f:51:a0:17:ca:81:
bb:bd:63:bd:ab:5a:94:aa:0c:2f:a6:4d:f1:de:bc:
7e:35:a6:5c:82:5e:30:a8:37:e3:d6:a2:d9:96:67:
b7:36:d8:8d:a4:00:01:3c:b1:20:f3:55:cd:3f:a9:
b4:18:c6:5d:61:63:01:1f:e7:c9:ec:03:f7:b2:0e:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:0C:BE:9D:72:DC:A8:2C:A9:DC:D5:66:D1:63:83:A8:3E:79:73
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3d:99:8e:2d:70:9f:8d:af:a3:93:17:f7:80:88:e4:ba:3a:
58:31:9a:2d:11:43:30:01:a6:4b:42:61:93:cb:45:d7:93:af:
b0:a2:74:3d:0c:bb:27:51:c7:47:62:12:1d:c6:fa:05:34:d4:
ce:ec:90:04:dc:2c:f5:9b:a6:60:34:97:e2:19:51:b9:6a:4c:
b9:83:4f:7b:9a:b3:18:ca:07:27:4e:92:cd:5d:8f:76:21:1b:
61:51:12:08:c2:e7:c4:1b:d7:bd:12:36:37:73:5d:ae:37:77:
02:6c:37:66:11:da:18:a0:5d:8e:99:93:fb:5d:32:c2:de:b4:
a6:5c:29:a8:f7:a6:ca:d5:dc:fd:b9:e7:6a:df:cd:d3:22:cd:
4f:ef:8d:c7:df:92:08:7d:5e:ed:6d:af:f0:37:86:2f:a7:7f:
75:a1:d8:49:52:0d:79:6e:58:d7:28:23:5d:ff:d1:59:5f:34:
c4:b4:e0:40:1b:28:ea:9a:33:9f:67:ac:8c:66:16:dd:6e:72:
2f:62:c1:2f:13:cd:27:5e:7f:17:e0:81:d6:9e:cc:24:99:d4:
f7:e8:fa:5e:9c:8e:64:7c:47:b9:72:c0:87:e0:dc:46:2c:66:
75:ce:2e:b9:e8:5f:af:86:b8:2f:f9:32:f4:cb:75:77:fd:9c:
2b:07:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:48 2025 by rpki-client