Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: FZjtpDJcqME+s7HU8zPvia4Izj7kRy8nBKl5MM8aYpc=
Subject key identifier: DD:D1:83:B2:FC:1B:ED:93:F7:37:ED:B9:8C:96:A3:7D:11:05:08:61
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019935010C99225F3BBE6F2A47AA6AC218B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 1439
Signing time: Wed 10 Sep 2025 19:01:25 +0000
Manifest this update: Wed 10 Sep 2025 19:01:25 +0000
Manifest next update: Thu 11 Sep 2025 19:01:25 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: d4x5Cv/2iE29jDCJ5oigZIFkYf0iLMorghJ2Ac5Q5XA=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:0c:99:22:5f:3b:be:6f:2a:47:aa:6a:c2:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Sep 10 19:01:25 2025 GMT
Not After : Sep 11 19:01:25 2025 GMT
Subject: CN=ddd183b2fc1bed93f737edb98c96a37d11050861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:f6:54:36:1f:e4:7c:cf:5e:03:74:5d:f3:
e3:37:e1:f3:ca:f0:ec:c0:90:5d:14:07:4b:b9:d0:
03:11:4c:d4:20:ff:ca:93:08:10:66:12:35:7c:bf:
3e:fc:22:61:80:9c:c1:bd:e8:39:8f:f5:d4:33:28:
fc:c7:31:ba:24:d2:8d:cd:dc:ef:9d:6a:65:63:2b:
bb:d4:d7:18:9e:5a:23:bb:31:7b:60:1a:6f:e0:0e:
7a:83:d6:0c:60:da:e4:9a:fc:56:c1:fc:5c:8a:31:
0b:f7:40:c2:9c:fe:22:da:0d:2e:d6:73:ad:b5:64:
44:c6:e6:c0:77:07:8f:89:7b:1f:e1:78:4c:ab:0f:
04:44:22:6a:9e:61:c0:f6:5b:24:5a:80:7d:1d:48:
ba:a8:ee:86:ac:88:1a:cd:20:0b:3f:90:bf:2e:f8:
2b:4b:37:e1:56:29:c5:d1:b9:49:04:35:2d:b6:13:
aa:4b:80:8d:81:91:65:a5:02:84:a0:93:06:5e:91:
8a:ce:f4:e3:91:4b:ac:e4:4e:8d:8e:6e:18:f8:de:
cd:e5:2a:cb:3d:7a:ce:f7:b0:d9:a9:93:f8:ad:80:
e0:ac:f3:3a:af:1e:6a:cc:bc:20:89:73:60:37:08:
d4:75:3e:71:26:dd:d0:05:8c:68:a0:a9:d8:80:77:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:83:B2:FC:1B:ED:93:F7:37:ED:B9:8C:96:A3:7D:11:05:08:61
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:d6:0d:23:95:ee:02:03:f7:a8:9b:39:63:d3:ca:6e:01:
e7:ca:f4:c2:14:b1:13:7f:cd:1a:c0:e7:de:61:bc:e6:79:5d:
05:9f:c9:f8:78:da:2d:b6:77:69:cc:43:b0:9b:20:dd:fe:c9:
bb:1d:d0:f4:7f:1b:4e:44:f3:2b:44:93:23:04:7f:41:10:36:
26:ab:91:d9:21:e4:be:bf:96:ed:a4:00:bd:ef:6f:3e:fb:4b:
40:ab:c3:30:c3:ee:f2:11:d4:26:a0:06:c9:b5:6f:c7:59:02:
a8:bf:64:d7:be:ce:e0:43:5e:6f:99:85:0b:a9:b1:d1:fc:ef:
de:14:d8:83:03:f4:d0:fa:31:67:bf:0e:4a:62:a4:b8:1e:85:
14:6e:0b:9d:70:61:1b:f4:4b:a5:d3:37:9a:c8:b0:e6:a0:ba:
46:8d:c8:90:ab:73:4f:e2:18:37:82:c3:8f:ba:27:48:e1:89:
c0:59:9b:ad:8b:9e:64:c6:84:27:71:ed:a3:95:3c:55:e3:b5:
ae:38:8f:cc:62:79:92:c4:5f:19:ea:24:dc:cf:f2:93:b8:b7:
85:a3:da:5f:0a:3a:b9:f9:20:de:89:e3:55:2b:68:5e:f8:9c:
69:be:6b:86:ef:f8:ca:08:29:aa:e7:4c:e6:c5:c2:4a:e0:df:
11:59:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:43:45 2025 by rpki-client