Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: Ces5fev25bGChBpiUwENivNFioBbYxLd7Xc/L1eka8U=
Subject key identifier: 33:43:AC:CA:D3:00:B8:79:C6:FB:46:35:AD:47:AA:C2:53:84:D1:58
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 0199180988A45DC3AB87D0836F1D0C7AE2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 0434
Signing time: Fri 05 Sep 2025 04:01:41 +0000
Manifest this update: Fri 05 Sep 2025 04:01:41 +0000
Manifest next update: Sat 06 Sep 2025 04:01:41 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: cmN6jRhtEIMVqUPRfyP5mt8oCoSNZHSolbbxTRnNNZ8=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:88:a4:5d:c3:ab:87:d0:83:6f:1d:0c:7a:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Sep 5 04:01:41 2025 GMT
Not After : Sep 6 04:01:41 2025 GMT
Subject: CN=3343accad300b879c6fb4635ad47aac25384d158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:ee:63:1b:60:61:50:c5:50:21:28:02:dc:
23:85:0c:ee:fe:33:00:6d:50:dd:6b:ab:55:76:1e:
06:e3:ee:92:1c:45:95:67:f7:05:40:38:a0:be:82:
10:31:05:76:85:78:01:e2:5d:b8:b0:7f:cb:b4:6b:
08:ba:d0:fd:4f:26:f0:8e:5b:a5:94:9a:2b:71:ec:
77:29:cd:a9:a7:3f:11:aa:db:b3:37:0b:7b:10:95:
76:17:80:bc:d6:09:ae:5c:37:40:40:7a:10:52:9e:
51:27:1c:92:f3:d0:85:fe:33:2f:6b:3b:ae:c0:81:
52:70:a1:c9:1d:94:f5:39:af:14:33:02:9d:94:93:
dc:b4:0c:ee:12:8a:6f:d4:01:d3:68:b6:cb:3a:0b:
57:53:1f:3d:5f:a9:5c:f0:d2:ec:df:04:69:be:7f:
20:9f:88:bf:40:bd:de:13:14:0c:b8:4f:87:9b:42:
0b:8b:21:1f:56:8b:f8:ee:94:76:34:da:e8:71:ed:
aa:79:b7:48:3a:a6:1b:03:c6:69:af:e4:c3:3e:82:
63:c3:54:33:78:80:cb:9d:44:51:06:65:a6:b6:f4:
32:5c:e7:d7:0e:1d:b9:b5:a8:07:fa:eb:77:b6:c4:
a1:ff:01:86:e2:4a:cc:88:28:7d:fc:51:8a:3d:35:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:AC:CA:D3:00:B8:79:C6:FB:46:35:AD:47:AA:C2:53:84:D1:58
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:78:03:b4:ef:e9:55:74:0c:a5:7d:c8:fc:17:5a:be:99:
a7:b1:67:50:9d:bc:99:f2:bb:3d:e2:df:ca:94:33:6d:d2:73:
98:41:2e:91:77:68:84:c0:25:36:28:35:ff:83:33:02:9b:4f:
ba:fb:f6:e7:05:14:38:68:b5:28:69:76:d4:5a:d6:11:34:50:
33:85:6a:76:5a:1d:5a:01:f9:71:b0:10:a8:e9:df:37:d7:5b:
6e:e5:10:2f:38:53:b4:ff:38:4f:7b:e6:73:50:7e:ea:fe:42:
7d:38:7a:e9:0e:ae:90:ee:00:31:1f:f1:92:0b:ff:8d:43:0c:
62:27:ba:9d:59:ab:6e:40:2d:3f:8b:90:54:ea:ba:bf:45:fa:
a8:9f:bc:ad:c3:60:58:d7:b2:a0:e1:01:88:db:7a:6a:57:29:
2d:fc:73:52:2c:3f:38:6a:9e:22:ca:b3:d9:78:2e:85:69:91:
0b:f8:2a:09:6d:68:1f:9b:09:5c:59:f8:26:2e:f5:6c:08:aa:
c3:fa:2f:4c:81:11:c5:b0:cd:2d:74:1f:07:c0:45:08:68:d0:
3f:63:80:54:74:74:db:e2:27:e9:c9:57:36:34:32:b0:76:e5:
d4:70:01:73:f4:a0:79:d0:d4:f2:01:a2:e1:3c:8f:5a:37:32:
42:da:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:13 2025 by rpki-client