Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File: o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier: k9PsfNs2piTwvi61gaXVqvyZUXVzwb4mvMIWCCDuX/k=
Subject key identifier: 0D:0F:C0:99:DF:08:E1:B2:42:1B:2D:A0:7C:4D:21:94:23:CA:5E:19
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer: /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial: 01992255EC3D0D4447FD724859B710CCB197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number: 54
Signing time: Sun 07 Sep 2025 04:01:20 +0000
Manifest this update: Sun 07 Sep 2025 04:01:20 +0000
Manifest next update: Mon 08 Sep 2025 04:01:20 +0000
Files and hashes: 1: fgNc3XJYzlvVGoE08QNz7y8we1c.roa (hash: 0HZ8FpOe+yubT+Fy50QFxz4rHKcRQcjh6z09BKS1JVY=)
2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: u6yBNvfuKnw25+9YSmj7sDOnHb6JZfgycn4y1jQ3W3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ec:3d:0d:44:47:fd:72:48:59:b7:10:cc:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Validity
Not Before: Sep 7 04:01:20 2025 GMT
Not After : Sep 8 04:01:20 2025 GMT
Subject: CN=0d0fc099df08e1b2421b2da07c4d219423ca5e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:85:07:fc:8a:84:a5:97:83:6b:e6:55:98:
da:a6:11:25:40:7f:a6:33:15:62:45:f2:3c:f6:8e:
97:c3:db:c2:b6:27:5f:d2:46:ac:ab:66:0e:10:e9:
1a:5e:87:eb:87:ab:09:74:7b:a7:57:d7:fe:17:a3:
f9:25:ce:31:53:08:80:91:e3:63:93:1a:5d:c6:5d:
b4:05:78:a3:45:90:31:99:bd:42:03:2b:3c:3c:57:
e0:0d:41:ba:e9:f8:78:b0:3d:c4:48:65:dc:6c:57:
41:b5:5f:84:02:14:45:9f:39:32:c7:50:8b:84:ac:
32:eb:28:e0:f4:94:bc:5f:a8:a6:5f:81:11:1b:84:
96:1d:6d:2d:e7:44:da:6c:4a:48:51:41:81:53:41:
97:71:1a:d9:e1:32:32:ef:5d:6a:e4:be:26:60:5c:
11:a2:aa:7c:2a:6e:e3:50:13:88:bb:0f:e3:3c:87:
4e:a6:46:3d:5b:df:08:dc:dd:fb:5e:b2:c4:19:68:
2b:20:d1:a0:26:06:cf:f4:b5:27:47:76:b2:a5:ec:
8d:9e:21:fe:20:07:29:64:e7:17:b1:92:a5:71:95:
49:3b:05:56:d4:b5:9e:e3:b2:6b:9e:87:0a:49:0c:
3a:99:5a:30:37:81:e4:cb:e8:d6:a8:a8:a9:78:27:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:C0:99:DF:08:E1:B2:42:1B:2D:A0:7C:4D:21:94:23:CA:5E:19
X509v3 Authority Key Identifier:
keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f2:d4:e4:bd:2b:0d:cb:16:d6:74:9b:61:09:53:aa:6b:de:
42:6a:1d:5e:8b:f8:3a:5e:89:ea:f0:6c:d0:0a:e1:de:09:cd:
6a:55:ee:b9:a7:ce:c9:97:2d:c2:57:50:65:19:a8:84:fb:32:
74:8f:27:4d:40:d8:81:16:99:c4:83:76:9f:bb:36:5c:0c:fd:
99:9a:5d:60:ae:84:f1:a1:62:93:1c:99:84:5d:9c:7c:33:91:
15:22:ad:a2:82:3d:c4:36:f9:0f:c4:9f:3d:87:bd:21:4a:dc:
65:69:5a:77:0e:ca:34:1e:eb:64:13:d2:df:32:b1:b0:31:07:
a7:23:db:70:2b:bc:e5:36:fd:12:46:89:2b:50:7e:1c:3e:fb:
68:6a:64:96:12:d8:10:ad:e5:ad:95:98:90:7b:b8:d4:27:66:
2f:bf:c2:28:fd:ee:b6:34:b1:f6:4b:33:f6:b1:be:f3:1e:4d:
25:a8:1a:17:4d:af:74:d2:95:99:a9:73:35:17:56:bf:db:44:
a2:79:de:d9:30:e3:f8:19:47:da:f7:db:da:56:f3:3c:0b:1b:
32:6a:dd:c1:db:a0:52:ac:f8:7a:e6:79:5d:51:74:65:d5:cf:
2c:56:49:92:f7:3a:41:74:b1:fd:f4:1d:f6:01:f2:1c:62:2e:
6b:91:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:54 2025 by rpki-client