Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: cCwINkVtYEUxsH+8S8bnRaSNvU9qbnL1qV2gKv0Czvs=
Subject key identifier: 63:10:D2:9E:90:15:79:17:06:00:4E:88:76:EF:8E:0A:4B:C7:B9:AA
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 0199225525B467E5B8AC9C9096DC2EDC040E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: SbsIAItWUhhDINZFp2E1TnReRpPgLsSYVPfPt58r27E=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:25:b4:67:e5:b8:ac:9c:90:96:dc:2e:dc:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=6310d29e9015791706004e8876ef8e0a4bc7b9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:52:28:47:b4:ea:a3:be:88:0a:6a:d8:82:
c1:a4:e2:f1:54:1f:13:8e:85:b0:bb:03:23:40:b1:
4d:e7:28:e8:0f:6c:2b:6c:4b:b0:12:ac:90:99:47:
41:cb:3d:b1:bd:0e:c1:00:57:74:25:e6:98:ca:51:
63:a3:b4:b8:4d:2b:af:2c:03:9d:e6:1a:4b:38:d2:
5d:5c:93:e0:51:d3:5c:71:34:d1:56:85:e3:f5:9a:
a3:88:19:77:6b:9e:9a:91:3d:36:cf:2f:f3:e9:42:
65:5a:fa:24:64:cb:92:74:6a:14:75:49:24:44:0f:
7e:30:5c:5b:a7:87:e3:93:7b:01:f6:e6:c4:d6:50:
78:24:15:77:75:28:79:9b:e6:be:73:53:42:f9:92:
a6:73:cc:13:59:06:7b:bc:01:c8:96:27:74:d0:dd:
43:20:a4:2c:8a:c7:28:4a:48:06:ec:23:80:78:c4:
17:21:4e:76:55:10:61:c7:bc:ab:c2:46:e7:d2:5a:
35:0a:ef:d7:5f:9f:9f:44:57:2a:cb:9e:39:85:69:
37:14:30:77:61:55:ad:74:b5:5c:d0:f1:67:14:66:
2a:e3:62:51:d5:63:4f:c3:b9:12:65:82:cc:0e:eb:
bf:26:01:2b:04:09:1b:9d:e2:4d:35:ff:0a:bf:b5:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:D2:9E:90:15:79:17:06:00:4E:88:76:EF:8E:0A:4B:C7:B9:AA
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b8:ef:8f:4f:96:53:46:b8:fc:50:99:ae:11:27:97:3a:14:
c4:09:f4:45:2a:99:f4:3b:8a:7f:23:5b:79:21:b9:3e:50:e4:
8b:9b:39:57:fb:d0:b0:87:97:1b:c3:74:67:7b:bc:ee:0f:9f:
b1:bf:1a:82:e9:18:f7:6b:bd:90:08:09:b6:49:ba:74:5a:60:
31:30:73:42:df:16:20:c1:fd:7a:ff:e5:df:e5:b9:1f:52:72:
02:e3:bf:90:b5:26:a5:1c:0a:39:0c:fd:88:dd:95:61:b9:26:
9d:9b:89:9c:0f:e8:02:0b:d0:b7:4a:34:58:12:ec:58:17:0c:
3f:b6:f3:59:77:e9:9b:9f:73:db:af:a9:cb:5c:75:47:ab:0c:
50:36:b2:c1:de:54:9e:a0:a4:23:70:d5:e4:84:51:0d:92:d6:
95:64:bd:70:14:84:a7:08:fc:06:5f:22:31:63:25:d8:2d:49:
ae:f6:96:4c:62:22:67:af:d6:87:22:58:dd:e3:6c:99:64:a1:
0c:11:aa:da:6c:a2:40:7c:a0:98:d3:24:03:ab:95:b9:82:b7:
87:c7:bd:60:59:6a:d4:95:20:52:a7:4c:af:89:65:c3:5f:b9:
ee:bf:bf:6e:91:35:89:88:08:d3:ce:9d:57:27:d9:7c:be:2d:
d9:35:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:40 2025 by rpki-client