Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: C41yLG2lbL9Ag72L0ifsB04y0hM78rK2iOwNeXd6/rA=
Subject key identifier: 9B:A5:9C:97:34:60:AB:5E:5C:5C:1D:79:CC:69:C6:BA:14:51:25:8C
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0199375CE7DDDD9C967F16F3183336E8C51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 06:00:59 +0000
Manifest this update: Thu 11 Sep 2025 06:00:59 +0000
Manifest next update: Fri 12 Sep 2025 06:00:59 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: sFK93+8QmO2DPtiooZCtTiLo9Ka9CRWYPoA4D8GwSFs=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:e7:dd:dd:9c:96:7f:16:f3:18:33:36:e8:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Sep 11 06:00:59 2025 GMT
Not After : Sep 12 06:00:59 2025 GMT
Subject: CN=9ba59c973460ab5e5c5c1d79cc69c6ba1451258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:71:bb:95:a5:46:56:fa:40:c6:3c:f6:14:
ca:a9:e0:1a:0e:2e:dd:c8:a2:af:86:6b:14:27:9a:
7d:5c:86:9f:ab:b5:49:cf:6c:5c:87:9a:ef:2a:4c:
47:98:f4:36:b2:0b:1c:40:cf:9d:2e:fd:49:bd:7f:
9b:1f:8f:05:ec:a8:65:27:0b:f7:0d:aa:2b:89:f4:
9c:93:8e:6a:92:3b:95:27:42:a8:e7:72:8e:0f:d2:
a9:aa:cd:ec:a7:ab:0b:01:37:ed:de:41:19:a0:cb:
1d:51:f8:ac:25:fa:7d:a3:ef:7f:56:af:a0:61:6e:
02:85:71:b2:fa:07:f1:70:5f:ea:1b:2e:a7:db:93:
76:79:df:f9:61:90:07:05:c0:d3:d3:11:42:72:1c:
60:f0:80:a0:74:5d:8b:f4:da:0d:4b:de:39:a1:3f:
c3:90:8d:a1:3f:99:3f:f5:db:ce:4c:01:a3:fd:4d:
84:93:b2:fa:d4:a6:ba:d9:5b:55:b1:4d:00:4a:36:
5d:1e:05:00:25:94:2a:d2:85:cb:db:9c:9c:ed:bd:
58:07:41:e5:69:71:8b:7a:e3:73:c5:d2:09:d9:66:
de:1d:05:78:d5:0f:e5:d5:6f:d4:ed:cd:e8:46:1e:
e9:64:79:74:31:bb:d6:98:24:2d:c4:99:52:6d:1e:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:9C:97:34:60:AB:5E:5C:5C:1D:79:CC:69:C6:BA:14:51:25:8C
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:f3:b6:b7:ed:4d:e5:8f:7c:74:e5:46:6e:fc:28:b2:e0:
89:a2:e5:45:71:d5:4d:98:69:16:51:dc:c5:ec:b9:12:f4:cb:
55:ba:2b:9c:08:60:d7:13:86:21:07:34:0b:b2:3c:72:d1:fa:
24:82:33:76:25:91:20:23:58:d0:39:f6:8c:89:de:c5:ce:6b:
08:a7:39:4e:6c:f9:16:e4:96:06:b1:40:24:e8:07:8c:3f:6c:
3a:e3:1d:f5:5b:54:0f:03:5c:a3:d3:76:61:c6:6b:ef:77:61:
51:7d:71:91:6e:a1:35:b2:d8:94:b4:b9:3c:de:02:db:29:d4:
05:bc:02:00:47:c5:2b:64:1b:8a:46:13:5c:70:6f:d9:b5:1d:
0b:ce:e1:e5:e7:84:14:e9:ae:46:39:fa:32:e4:43:a7:71:3d:
db:53:8f:8c:81:40:72:e6:d8:e7:f7:b8:e2:82:b6:b0:90:66:
44:32:84:f9:2d:ac:84:c8:f9:01:41:8e:d9:2d:ec:88:a0:81:
ac:57:58:76:3c:29:a9:d6:02:c0:ec:92:ad:a8:91:23:ad:6f:
86:eb:b0:15:90:b9:1b:06:6e:94:6e:e1:f2:f0:74:99:6c:ad:
91:90:bd:ff:bd:1a:be:e3:a5:a0:78:d8:30:0a:05:9d:e3:78:
99:6b:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:37 2025 by rpki-client