Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: DMAJLQEsgVUIctQBkXRuGPBEC/6vUF0u97bMKAe55q0=
Subject key identifier: 94:61:64:00:6D:6A:CB:85:67:23:58:18:3C:81:6A:C8:B3:60:12:02
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 019923A0B4DBB159CED3A4792DAF386CE702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 1267
Signing time: Sun 07 Sep 2025 10:02:38 +0000
Manifest this update: Sun 07 Sep 2025 10:02:38 +0000
Manifest next update: Mon 08 Sep 2025 10:02:38 +0000
Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: m7cvHz+lSrpFv3XIushmrbC1vN7F6FXKmLtff4rLTcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b4:db:b1:59:ce:d3:a4:79:2d:af:38:6c:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Sep 7 10:02:38 2025 GMT
Not After : Sep 8 10:02:38 2025 GMT
Subject: CN=946164006d6acb85672358183c816ac8b3601202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:7c:83:80:de:36:4a:f4:f0:fe:8d:12:03:
03:cf:6e:a2:be:23:97:14:f4:e5:f6:5e:e5:1f:be:
06:a1:99:d9:78:08:bf:a9:37:0e:a8:bf:16:6e:1e:
40:8b:99:27:d9:f8:a3:7f:fa:7d:72:2b:6f:22:1d:
e7:37:43:0b:6f:40:38:47:36:a1:ad:2a:21:18:ca:
43:c5:6e:be:79:81:43:75:b6:09:dc:e0:f7:80:9c:
f5:3d:4a:18:b0:7b:a0:0c:d0:32:02:d7:59:c5:47:
4e:e2:c2:75:c7:8e:45:b2:f7:c8:2a:00:b5:54:53:
28:a2:22:b6:13:d7:74:a9:fc:74:3d:44:7f:91:d0:
be:1d:b6:c9:43:4c:e8:f9:a8:61:16:82:d5:de:8a:
be:53:19:76:49:21:fb:b4:90:b4:75:94:2b:7e:07:
0e:d2:10:6d:66:96:eb:f5:85:44:25:de:7f:a5:21:
b3:58:56:80:d1:86:56:1f:04:03:22:cc:70:23:06:
75:8d:9e:f1:bb:85:87:d6:3c:b0:35:40:d8:ec:74:
0b:72:5e:ec:2c:20:fd:e7:21:9e:c3:34:00:af:67:
a1:54:b1:9b:2d:b8:0c:47:de:fc:95:7e:ef:74:1b:
a7:eb:2e:54:b3:dc:1e:0c:ce:76:f2:f9:de:b5:9d:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:64:00:6D:6A:CB:85:67:23:58:18:3C:81:6A:C8:B3:60:12:02
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ec:81:cd:19:1a:97:d2:e2:5a:9e:aa:05:7f:3b:b4:ab:1a:
f6:7e:8d:e8:ad:c8:c3:b8:7a:aa:36:79:e5:03:fb:23:6f:05:
c8:9e:6a:dc:8c:57:18:58:13:45:97:e1:1f:c8:f0:5d:1e:a5:
fc:4d:79:fb:32:c9:7f:c0:a2:bb:d5:d3:a4:58:70:f5:56:56:
18:1c:05:bd:41:82:f8:44:b9:3b:ec:b5:69:49:b3:e3:94:e4:
32:82:7f:b0:6b:98:e9:be:97:28:8e:93:6a:4f:59:ab:b2:ef:
51:d4:f5:ea:67:e3:c8:26:32:e7:84:51:5b:c8:04:0a:6e:4b:
5e:7e:b0:fc:d4:79:81:0d:a5:e9:e6:1d:17:e5:84:08:24:01:
88:68:a7:8a:7e:74:fe:c4:bf:f5:a0:8c:2f:d9:43:5d:b3:66:
2c:d7:82:14:f5:c8:4c:a2:11:69:ef:88:d7:17:33:5e:cd:00:
f2:f7:ca:e0:27:a8:c8:8c:03:54:13:e6:44:39:4a:37:46:e1:
8f:16:11:6d:f0:46:9d:5b:dd:9e:ed:e5:4a:65:af:94:73:5c:
d2:0f:6d:83:f6:6e:06:01:a9:3d:f0:5d:d3:cc:9b:bf:82:ef:
75:ba:d9:99:a9:26:4f:93:5f:66:16:48:13:d5:99:06:61:83:
e6:bc:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:25 2025 by rpki-client