Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: 6QLZKAGRZYhd/rP+zX1OjQCYfaVK8rfs0tHfywrDvuQ=
Subject key identifier: 35:B8:C1:97:4E:CC:A6:76:95:9D:CA:F2:A8:B0:05:86:03:28:2A:27
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 01992C34CBE3D28CA9BC4C18B089A3B6331D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 0299
Signing time: Tue 09 Sep 2025 02:01:21 +0000
Manifest this update: Tue 09 Sep 2025 02:01:21 +0000
Manifest next update: Wed 10 Sep 2025 02:01:21 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: W3lV9GsuFbsIMZrXHOSHfjOsAo1gX0e6jNZDDJFsxAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:cb:e3:d2:8c:a9:bc:4c:18:b0:89:a3:b6:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Sep 9 02:01:21 2025 GMT
Not After : Sep 10 02:01:21 2025 GMT
Subject: CN=35b8c1974ecca676959dcaf2a8b0058603282a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:13:30:2f:8c:c8:72:1f:14:5e:93:58:58:
22:6b:85:4b:63:e6:43:1d:9a:47:ce:00:08:1f:ff:
34:00:af:86:f2:2f:72:82:43:0c:2c:f2:f2:8d:81:
a0:9a:14:39:0a:6e:e7:ee:83:7d:5a:3a:f6:59:cd:
6b:78:9d:ad:cb:59:2b:23:59:14:a7:3d:07:3b:68:
17:73:8a:c9:2a:e2:af:8a:91:6a:4e:3f:52:75:77:
d2:fa:7d:83:72:a1:2f:fe:cd:37:48:f4:65:b3:7a:
04:d8:4d:8f:e9:08:bb:93:d3:93:3d:ca:f5:2c:c4:
9f:14:3c:75:cf:bd:34:a0:b2:12:d8:35:1b:08:b6:
3d:23:8f:88:f1:87:11:23:fd:a4:9e:a6:b6:d4:d3:
7b:ac:53:64:f3:05:0e:b2:9a:57:45:47:4d:d2:d6:
90:c0:3d:48:90:55:71:2f:42:c1:7a:23:2e:1c:f4:
17:a9:ed:41:ba:a8:d0:db:7e:32:b7:51:67:79:6c:
8b:58:21:fc:64:81:c6:ea:62:45:f2:ea:ae:3c:96:
86:62:a0:bd:68:c0:c3:a4:84:30:11:a9:1f:2a:ad:
58:68:20:86:b5:99:da:48:26:b5:2f:87:62:16:4b:
b6:73:c7:e7:e6:82:7d:cf:d4:4d:86:4c:98:f7:95:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:C1:97:4E:CC:A6:76:95:9D:CA:F2:A8:B0:05:86:03:28:2A:27
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b8:67:09:98:fd:58:63:62:e2:19:dc:52:75:89:c6:77:95:
af:bd:7b:66:e5:0d:77:3f:0d:1a:6f:a0:04:8a:1e:40:54:8d:
71:04:76:8a:59:8d:db:87:17:5c:b7:23:78:6a:8d:bc:33:99:
46:91:bf:22:1e:f3:4b:e0:75:0d:4e:ae:cf:e6:05:d5:7d:13:
26:03:4b:ea:4e:e2:eb:ae:12:c8:d8:d4:f3:ad:81:30:be:63:
8b:cc:53:a1:05:71:28:1b:27:46:95:e6:9f:54:64:12:45:60:
75:72:fe:82:4a:19:2b:d2:7a:0f:77:9e:2e:8c:d2:4b:fd:22:
81:30:95:ad:08:ad:7b:5f:1c:59:67:73:dc:c6:21:91:22:d9:
51:5a:99:0f:1e:a7:9d:1d:8d:42:af:5d:cb:2e:86:92:22:f1:
54:70:7b:51:04:97:0b:c1:02:1d:b4:59:b3:e6:46:80:57:7e:
ec:3f:22:07:6b:d7:05:d8:60:59:af:42:48:1b:e3:97:92:ca:
0f:34:29:f7:73:69:aa:ff:60:dd:8d:7a:df:57:09:82:33:73:
af:63:78:89:97:e6:42:ab:a1:0a:4e:d0:a0:75:d6:ce:cd:8f:
81:6f:cc:8f:62:73:35:e1:52:d3:b0:df:a0:fa:f8:30:d6:bf:
29:e9:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:58:38 2025 by rpki-client