Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: 3o++e2q8kDW6ei0JkcfJXc9erYwNok0cS61DnG9CjPs=
Subject key identifier: 56:11:7B:C8:AC:92:EE:7A:81:ED:A2:DB:CD:62:1B:35:BF:53:4A:48
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 019917643E218E2D65BE844D8F372DB986E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 01:01:09 +0000
Manifest this update: Fri 05 Sep 2025 01:01:09 +0000
Manifest next update: Sat 06 Sep 2025 01:01:09 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: m7NlG/I5rlrBa96ojhWbCkypybnnIBM1mux5+1wzXn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:3e:21:8e:2d:65:be:84:4d:8f:37:2d:b9:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Sep 5 01:01:09 2025 GMT
Not After : Sep 6 01:01:09 2025 GMT
Subject: CN=56117bc8ac92ee7a81eda2dbcd621b35bf534a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:86:14:2f:40:81:e1:37:bd:98:49:80:83:
5d:65:57:39:da:d7:30:c7:63:23:7c:69:97:7f:b1:
91:9d:56:91:b6:ea:9d:7e:25:f6:09:8b:22:62:c7:
f8:15:da:49:59:41:fd:e6:b8:cf:d2:7e:6d:0a:c8:
d9:79:c8:4e:48:bb:a7:41:23:56:89:9c:d3:3e:5d:
54:c2:90:13:96:58:1d:6d:e2:6c:ba:9e:66:ae:80:
26:a6:d1:57:69:9d:59:01:6a:70:94:f2:5a:9f:8f:
22:82:3d:c0:e1:80:36:2c:6d:59:92:69:b7:f1:f4:
f8:f2:1c:51:90:19:0d:14:ca:ac:be:63:59:3f:b6:
8f:ca:54:6f:dd:ab:9a:0d:cc:5a:8a:fd:ba:bb:9b:
16:d8:b4:6d:93:46:96:00:56:45:43:b5:af:30:c6:
a7:f6:2a:0a:e8:a5:40:01:0d:93:26:02:81:aa:27:
d0:66:76:92:e9:12:e4:af:37:46:f7:c8:26:5f:41:
5a:f0:95:67:54:04:74:29:54:e1:c7:73:86:df:ea:
4f:0f:d1:ba:f2:d3:70:6b:4f:3b:1e:9d:0a:6c:be:
69:ae:23:20:c9:cb:f0:c6:d4:ec:59:ed:95:39:d6:
81:12:7b:03:54:d7:76:70:73:8b:6c:71:64:f2:aa:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:7B:C8:AC:92:EE:7A:81:ED:A2:DB:CD:62:1B:35:BF:53:4A:48
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f3:13:99:d0:49:af:fd:c5:19:eb:ea:c7:aa:ab:d6:59:df:
43:0e:53:9b:a7:a9:98:f8:c5:7c:05:97:2e:9e:25:8d:10:4e:
bb:24:83:44:7b:3f:ef:22:74:00:6f:ad:f2:e4:bc:35:61:b3:
ef:66:cc:c2:c7:e2:e3:7e:94:9c:47:3e:57:64:82:6d:d0:7d:
42:83:b7:44:8c:b2:ac:86:77:2b:7f:87:f7:55:68:90:42:df:
f6:14:c0:45:40:bb:8d:93:0a:f3:8a:0a:d8:f2:79:1b:6c:eb:
9c:42:ae:46:c8:5e:82:be:fc:41:d1:b3:09:7b:b1:90:84:2d:
70:95:1c:b8:2e:46:2d:e8:37:8e:00:b9:41:d6:ef:bf:91:e3:
80:9e:c0:7e:64:ef:4d:95:20:d3:35:db:ee:63:e3:c4:3f:7a:
7f:95:02:bf:b6:13:d3:24:eb:be:16:15:a9:57:01:41:3a:11:
48:27:70:c7:f4:81:ce:9a:ac:15:d0:91:7a:9f:a3:85:84:b3:
ec:d2:e5:8b:f6:3e:62:a7:ea:aa:62:cf:e2:33:07:ae:53:9b:
b2:8c:6c:aa:ac:cc:68:ec:fb:c3:6f:1f:4c:a4:9b:25:27:31:
f6:c0:84:04:0e:a3:d9:4a:7d:28:29:40:14:d4:cf:1f:69:c8:
c1:e7:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:56:08 2025 by rpki-client