
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
File: mAO6qFdULHWMJI0xHmOX_OSDgBo.mft (raw, json)
Hash identifier: Vo/8/8VyROclLNih7FJKNqcNUmcBVO2o4tW0av/H6Bw=
Subject key identifier: 9C:BD:DE:C5:3B:E8:8C:16:AB:C5:64:E6:9E:F2:C3:8E:0D:15:F0:CC
Authority key identifier: 98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
Certificate issuer: /CN=9803baa857542c758c248d311e6397fce483801a
Certificate serial: 019922C38EF3AC83FBD038A2E6A6CF3E2010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
Manifest number: 0149
Signing time: Sun 07 Sep 2025 06:01:05 +0000
Manifest this update: Sun 07 Sep 2025 06:01:05 +0000
Manifest next update: Mon 08 Sep 2025 06:01:05 +0000
Files and hashes: 1: mAO6qFdULHWMJI0xHmOX_OSDgBo.crl (hash: 2/GMP7SgD2Ql4q4QHzVrvDYWgnblxzAraum0INnOruI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8e:f3:ac:83:fb:d0:38:a2:e6:a6:cf:3e:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803baa857542c758c248d311e6397fce483801a
Validity
Not Before: Sep 7 06:01:05 2025 GMT
Not After : Sep 8 06:01:05 2025 GMT
Subject: CN=9cbddec53be88c16abc564e69ef2c38e0d15f0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:1b:29:0d:e0:d0:f8:a8:7b:8a:dc:8d:c4:
e0:5e:a3:6e:7b:f6:2a:54:d4:61:88:a8:89:a3:2a:
ed:5d:8f:00:0b:ff:80:7d:ec:52:d0:c1:a3:d6:55:
9e:f2:51:66:12:99:e5:11:17:22:60:fd:c0:7f:8f:
a0:29:92:fc:08:b2:88:6a:0e:2d:8d:54:56:21:2a:
aa:cb:74:8a:85:14:51:19:c4:fb:63:e0:10:78:53:
ca:12:63:3a:95:04:d8:7a:42:eb:80:50:ce:cd:17:
8e:87:6d:0f:3f:a5:0c:7c:bc:4e:77:f8:15:3e:9f:
19:86:42:cf:ee:ab:78:95:ad:ba:fa:ed:59:fa:1b:
50:2a:61:9e:a1:2a:11:f6:b6:38:91:86:7b:fa:e6:
80:90:27:19:f6:26:cc:99:f8:09:05:1b:f9:6b:4e:
ca:95:94:c0:3c:65:56:80:00:09:43:71:b3:40:32:
86:de:2a:ba:bd:60:a4:d3:da:81:a5:f4:68:10:ad:
43:8c:c3:47:6f:d2:6f:c3:ab:43:7a:14:af:51:ea:
b7:66:03:d9:44:6b:b0:fa:cf:65:19:d4:ca:62:9c:
66:eb:8c:bd:4e:46:67:db:85:04:a4:5a:a5:a0:15:
dd:00:7b:17:ee:d8:d9:25:71:15:5f:c1:8b:cb:57:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BD:DE:C5:3B:E8:8C:16:AB:C5:64:E6:9E:F2:C3:8E:0D:15:F0:CC
X509v3 Authority Key Identifier:
keyid:98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:0f:b4:4c:c1:90:07:cb:c9:41:49:65:a9:04:6b:0f:0a:
58:c7:62:fd:a1:5b:a5:1e:65:f8:4a:ae:ee:41:e2:60:56:aa:
f8:80:23:b8:ac:69:ed:6f:2f:4f:4f:2d:7f:3d:45:bc:9d:2b:
bf:7a:0d:a2:66:5d:0a:1c:d2:a8:dc:76:6a:d5:e8:7b:40:d0:
ae:15:f8:68:f8:a8:12:68:b3:84:86:69:b5:e6:2d:8b:29:d7:
24:20:59:0a:8a:d2:23:3e:5d:39:f7:27:b7:d3:05:0f:a7:3b:
32:60:84:95:6d:d9:6c:3d:eb:c5:ca:dc:7e:4a:1f:a1:99:32:
5e:65:3f:47:db:3c:88:5c:86:3a:cd:7f:dd:5a:db:43:c1:11:
46:65:72:31:46:f3:4b:02:5d:d0:49:6a:89:43:9e:a0:ec:9d:
36:4e:c4:12:33:d1:88:42:47:93:59:12:3b:4c:cc:26:d4:89:
57:64:c7:8a:43:b4:f4:bc:c9:e6:07:b1:8e:f7:e1:59:89:4c:
2b:19:93:16:78:b9:27:ff:06:49:7c:22:79:15:41:1b:b3:0b:
ea:4a:45:57:51:0e:c7:1b:aa:7d:72:8b:f5:58:a5:7c:35:2d:
dc:77:20:0c:10:49:cf:d2:10:4a:2b:6a:9f:bd:29:59:62:64:
e2:b3:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:45 2025 by rpki-client