Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: nZWO9uPdRVGeAWXklFxfXElid/HKdyHQgtIMy1L/il0=
Subject key identifier: 59:D5:3C:F1:14:33:62:57:E2:32:F7:FC:C0:13:6D:C7:9E:8D:93:09
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 0198CB373FBA6B68AA60DBDCBC8EDDCE862E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 1641
Signing time: Thu 21 Aug 2025 06:00:52 +0000
Manifest this update: Thu 21 Aug 2025 06:00:52 +0000
Manifest next update: Fri 22 Aug 2025 06:00:52 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: lusfu2Nb/9guj772YRTiz1Rd4H5mjaTcZ9XhLL5GG14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:3f:ba:6b:68:aa:60:db:dc:bc:8e:dd:ce:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Aug 21 06:00:52 2025 GMT
Not After : Aug 22 06:00:52 2025 GMT
Subject: CN=59d53cf114336257e232f7fcc0136dc79e8d9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:20:11:8d:3b:84:7b:3b:c8:91:f7:a9:bf:
a4:9b:35:26:3a:9d:58:b8:22:c1:be:6c:b1:d7:7d:
32:8d:69:6b:d1:ba:ae:67:b2:04:20:0d:d9:23:ff:
2e:02:45:93:8a:c9:52:62:3c:d9:fe:91:91:75:e4:
b5:7d:27:6b:fb:6b:5b:2c:d5:2c:72:cd:23:1c:81:
cd:db:35:42:ae:72:cc:0d:95:59:00:29:6e:e2:89:
0e:48:8a:dd:ed:c7:4b:86:eb:9e:04:3c:7f:89:e3:
b8:4f:a4:3f:d3:34:78:39:ad:37:cc:71:60:d4:8d:
8e:49:9b:dd:d8:23:4e:8f:ad:f7:b4:32:bb:91:62:
8d:c9:bb:9a:3f:d6:6e:79:2e:e8:62:f6:73:9b:fa:
51:7a:ae:b1:b0:03:31:43:c1:09:e7:62:cb:19:b8:
0a:9a:06:c3:e2:e6:1b:2c:91:ab:3c:cb:04:ae:21:
80:66:13:db:c7:80:82:5a:35:ca:c8:4a:38:71:cb:
e8:a5:52:a2:ab:c2:01:22:55:2e:6e:db:0b:e3:58:
e9:70:f9:2d:b6:90:5f:34:a2:66:c5:1f:a6:b2:f1:
0c:81:c1:5c:ef:e9:b4:fb:43:21:22:75:e8:b3:1c:
12:2d:47:77:28:55:c0:aa:dc:b9:a9:dd:8b:ae:e4:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:3C:F1:14:33:62:57:E2:32:F7:FC:C0:13:6D:C7:9E:8D:93:09
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:0b:9a:c0:25:e4:5e:df:21:8d:85:4d:8b:e6:6e:88:78:
20:05:ac:af:1c:17:8d:d1:2d:7b:07:87:67:c4:e0:86:d3:9a:
11:3b:65:36:4f:95:e9:e8:5a:09:8f:ad:11:ca:99:a8:ea:3e:
cc:40:28:b0:93:81:04:35:b6:40:90:c8:86:09:5d:87:05:42:
60:0c:13:c2:ee:ae:c5:a1:3e:be:95:22:66:08:d8:7a:7c:fe:
d6:03:68:49:04:8f:2a:bd:32:6b:58:57:d0:8d:33:52:f1:9d:
1f:f9:1d:16:ce:2d:de:f7:fd:4a:61:cd:2c:56:29:d3:60:14:
90:c2:f9:88:98:98:13:00:e1:80:73:c3:cb:d3:72:e7:0c:66:
34:aa:81:18:db:ac:90:d0:f3:30:27:33:5d:19:70:f2:f1:06:
73:df:0f:98:c8:95:bc:e5:94:42:de:57:39:62:52:9d:36:59:
24:0b:8d:99:4d:68:fa:f2:fe:d0:8b:58:a9:e6:1e:d7:84:4b:
09:25:50:b1:fe:ce:e0:03:d6:ad:4c:6a:f7:dc:c5:07:d2:5e:
ba:5f:9b:cc:38:12:2c:16:54:df:40:08:4c:cc:89:3b:c1:10:
53:d3:79:40:dc:32:24:a5:d9:23:34:11:c5:b3:3a:b8:17:79:
2e:bf:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:41:34 2025 by rpki-client