Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: ne7a9p6FtiNm/aDtOiCpiFCR6qrsmsytxxzv/B+bYas=
Subject key identifier: 70:09:64:F3:BA:D4:77:B9:51:6F:E0:31:D2:78:D1:95:49:0E:86:B4
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019921B16A2246596351AB4F7769E44C7C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:01:39 +0000
Manifest this update: Sun 07 Sep 2025 01:01:39 +0000
Manifest next update: Mon 08 Sep 2025 01:01:39 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: 0tsF5RQF4avrUvcYJhqxIiIADsRthvRx9HAKetbukBo=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:6a:22:46:59:63:51:ab:4f:77:69:e4:4c:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Sep 7 01:01:39 2025 GMT
Not After : Sep 8 01:01:39 2025 GMT
Subject: CN=700964f3bad477b9516fe031d278d195490e86b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:f2:90:e8:65:39:8c:ed:86:fc:20:9d:e6:
c9:d4:1f:39:58:2a:6a:57:b1:25:22:57:7f:9f:f3:
8c:b1:06:f0:c1:42:a3:bb:52:49:0d:0f:77:8e:bb:
2c:ba:78:c0:a0:1f:fd:8b:73:04:0b:1d:79:0b:ba:
25:31:15:b1:97:c5:5a:2d:6f:62:46:9c:80:0e:1b:
98:10:a8:3b:10:45:0b:2f:4d:06:96:95:35:59:fc:
09:a1:1d:bf:a9:49:f8:fd:dd:8d:59:1b:d4:c8:29:
d6:85:da:f3:ed:c3:8d:cf:99:bf:dd:06:23:5e:90:
9e:00:17:be:45:a6:59:3d:fd:b7:13:a0:0b:78:de:
62:d2:87:e5:73:1d:1e:73:6c:9c:7a:f9:2f:9e:c1:
5d:2e:bd:4b:cb:c7:94:d1:42:32:75:50:38:da:ae:
a3:4d:fa:f8:b0:3a:71:34:7f:eb:25:8c:35:6d:fd:
89:d2:6f:47:65:ac:91:c9:6c:1d:5b:6c:47:e7:db:
70:66:1e:1c:a4:0d:f1:7a:69:ab:25:37:f2:4f:4b:
59:37:ec:09:ab:9c:1e:b8:0c:ea:41:22:d5:1f:38:
7a:31:e3:c2:b5:b0:04:25:5b:20:f7:28:e4:e5:20:
58:e3:12:13:63:86:79:a1:a6:76:b3:02:8e:11:60:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:64:F3:BA:D4:77:B9:51:6F:E0:31:D2:78:D1:95:49:0E:86:B4
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:39:f7:4d:0d:58:5e:0e:11:d5:32:01:7a:af:33:ef:ff:c9:
63:58:98:7d:33:e8:6e:ac:25:de:f9:c1:4d:5b:26:9c:9e:00:
e2:50:a2:77:3f:d5:36:24:d0:27:a8:02:f0:3e:f5:4b:e2:43:
1a:37:c0:ea:76:57:3c:06:36:37:42:b8:74:67:ba:94:de:5c:
50:d1:43:59:8e:b5:fb:94:a3:dd:6e:5c:65:77:cd:37:5f:1b:
65:a9:fb:5c:e7:d6:45:15:22:57:0b:c6:03:c1:71:80:8f:7a:
22:1e:58:ff:49:49:ec:0a:54:79:04:14:68:3a:c0:1a:aa:00:
73:06:bb:50:91:45:f0:22:71:5e:ed:4e:89:ff:6b:7c:dd:f7:
f2:21:ae:7b:af:3b:da:74:5b:5c:0c:3a:f8:c2:83:36:fd:f5:
7b:2e:d6:d9:b3:f7:ab:b9:e3:ff:53:30:03:11:23:09:0f:82:
0f:a9:e8:40:85:ad:ed:c7:cb:4a:f0:7f:d9:4d:e1:b4:43:38:
52:43:a6:a6:04:cf:50:34:42:c8:c6:02:42:6f:03:be:ad:39:
ba:68:f3:b0:e9:96:b3:a2:2c:2a:72:1d:6b:ae:dd:cc:53:9c:
d5:50:84:f5:f2:3b:46:db:e4:1d:76:17:0d:de:79:75:07:5e:
f8:40:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:32 2025 by rpki-client