Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: zQeT60Z7B3Wg4KnNMaTzvsedWttbhywxNSqKtixCXps=
Subject key identifier: 9F:70:3A:20:D1:03:3B:D2:1D:62:1E:AB:29:0C:FA:E2:18:08:9D:CA
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01992330CA3BA55639C174B3EE2F3AC3BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 12C0
Signing time: Sun 07 Sep 2025 08:00:23 +0000
Manifest this update: Sun 07 Sep 2025 08:00:23 +0000
Manifest next update: Mon 08 Sep 2025 08:00:23 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: PZkbYTtNvSbS9/+wxSDV6UC/5ZgsqGlmvEdPPHzzFfc=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ca:3b:a5:56:39:c1:74:b3:ee:2f:3a:c3:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Sep 7 08:00:23 2025 GMT
Not After : Sep 8 08:00:23 2025 GMT
Subject: CN=9f703a20d1033bd21d621eab290cfae218089dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:74:c5:12:fc:a6:74:1e:ce:87:09:6e:52:
70:bd:49:5d:28:c1:d7:01:17:47:02:ff:ce:26:87:
77:3b:c0:89:27:5c:be:20:f0:86:c4:2d:61:c1:03:
74:07:78:d3:e0:dd:a7:76:1e:77:bd:4e:94:4c:2f:
f5:b0:4e:84:10:ec:8f:85:c5:c3:ac:9e:bf:97:50:
0b:4e:b6:e2:b2:6d:db:63:b5:75:9e:1d:61:d9:3b:
46:55:62:03:1e:94:03:78:f9:2c:db:31:c4:65:af:
12:3b:73:cd:c8:b4:5e:3e:72:53:84:8c:69:28:85:
e4:4c:ef:17:5d:ba:c0:07:2d:53:f4:36:f8:d2:fd:
54:a4:69:20:3a:76:b6:a4:56:65:e1:24:ad:8d:f6:
67:6f:c7:44:f7:09:ed:c9:9b:c5:8b:b8:c8:5d:46:
94:d3:f3:b5:7c:e2:9a:98:a5:12:79:1f:ca:8d:fe:
bd:95:17:1c:8c:75:51:a4:f4:8d:52:1b:53:ad:38:
1d:c6:96:70:6f:2d:12:be:1e:78:ca:40:3a:1a:ac:
f9:f9:4d:3c:75:88:e2:ab:88:57:8c:5c:34:6f:39:
6c:44:05:0c:1a:af:4c:ca:a6:ee:4b:70:a3:05:f1:
aa:f9:15:8d:74:d7:a3:fc:69:81:64:b0:32:eb:b4:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:3A:20:D1:03:3B:D2:1D:62:1E:AB:29:0C:FA:E2:18:08:9D:CA
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:62:dc:37:e9:54:8f:b9:77:b6:c0:4d:30:88:11:7f:e7:
f5:0f:b4:6a:51:72:e0:7b:45:97:93:75:ee:70:9f:af:8d:ff:
ca:5e:fd:3b:53:8d:62:3f:a1:82:31:6e:6b:11:1f:ed:90:5e:
73:7d:58:92:cd:a0:65:0b:4b:e8:b9:73:7c:ee:ce:6c:aa:e8:
ec:5e:dd:2f:d8:d6:b6:8e:e2:d0:9e:db:54:b7:ec:0c:20:aa:
7c:2a:ec:eb:ff:cd:d5:ef:75:88:34:8d:0c:46:87:f9:10:a2:
6b:b7:4e:23:a8:94:59:63:ba:16:52:76:66:3f:83:5e:fe:e5:
b1:a6:d3:3a:2d:0e:93:17:d7:01:55:5e:13:25:83:62:aa:3a:
c2:d1:69:ba:e5:44:8b:8b:43:39:03:cb:1f:91:ee:b4:1d:a0:
0d:9b:db:87:9a:4e:0e:71:6b:79:48:e6:b1:b1:e0:3b:d7:a3:
d8:fa:59:4a:34:31:03:64:b0:38:a4:73:bd:45:f2:aa:d1:b2:
9c:bc:26:19:37:b8:49:97:bc:fa:3a:a0:55:13:9c:59:25:06:
fa:47:af:95:63:79:8d:d3:ea:ea:df:49:b9:9b:82:5d:17:24:
1b:be:01:4a:0a:9f:28:e2:8f:8e:0c:da:77:04:1f:78:b3:ae:
3e:99:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:32 2025 by rpki-client