Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 2r4j78ddArtDoI5cvKodmmnHsBun+axE0cz8qaajHkY=
Subject key identifier: A8:F7:5E:D0:19:B4:6F:A8:0C:E4:24:41:ED:4F:03:AC:82:BF:86:5E
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019933EE59C2C5154A94F6B7B7D8F74CAC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 13C3
Signing time: Wed 10 Sep 2025 14:01:22 +0000
Manifest this update: Wed 10 Sep 2025 14:01:22 +0000
Manifest next update: Thu 11 Sep 2025 14:01:22 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: 0g9Yp7VuT8ahDNifa8YDytrI4Ol3C15H3XXQ4J9gPes=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:59:c2:c5:15:4a:94:f6:b7:b7:d8:f7:4c:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Sep 10 14:01:22 2025 GMT
Not After : Sep 11 14:01:22 2025 GMT
Subject: CN=a8f75ed019b46fa80ce42441ed4f03ac82bf865e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:6d:fb:9f:b1:16:ea:9e:33:64:61:41:b2:
0d:13:2b:1f:85:99:2d:61:9b:94:ca:fc:bf:01:f1:
79:58:57:86:73:69:0c:97:13:58:61:e7:8b:89:82:
2e:cd:3b:7f:d0:1e:d1:3e:98:24:e1:bd:7e:ba:e7:
67:a6:a0:cc:bd:84:ab:df:59:9d:03:03:1e:77:11:
5e:ab:fa:a7:ac:75:7a:0f:cf:4c:01:19:67:97:fd:
99:89:56:ea:01:07:6d:f8:c6:2a:b4:3f:c0:bb:d1:
ba:96:bc:44:59:b3:de:9a:1d:94:7a:5d:c2:d2:44:
ef:6e:d8:62:51:a9:03:fc:4b:c9:5e:64:18:96:f1:
2d:ab:01:d8:ae:34:68:73:ae:e1:c2:2a:b6:d3:8f:
06:38:f8:f1:7b:0c:f4:e6:c7:e6:f7:ba:30:30:d9:
62:04:43:f4:26:bb:04:45:26:f4:37:91:54:2a:c7:
cd:df:6b:90:0c:ce:84:a8:73:a1:d1:62:0f:8a:23:
5f:b8:fc:97:9f:71:61:bc:33:f5:0b:9b:66:70:f6:
0f:43:8c:5f:7a:1c:c5:e4:6e:6b:eb:19:42:7f:82:
6d:78:4d:37:1b:2e:ae:ab:b7:70:2a:f3:47:c5:05:
ec:ca:5a:e2:cf:df:7c:56:35:f3:68:2a:4b:60:3f:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:5E:D0:19:B4:6F:A8:0C:E4:24:41:ED:4F:03:AC:82:BF:86:5E
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2c:b3:4a:b5:b7:d8:27:f2:f7:e1:ce:c1:2c:80:ef:ab:4c:
c4:35:3b:fc:35:5f:43:27:2e:a0:df:50:f3:7e:a1:a8:4c:6f:
ab:34:02:82:b6:0d:15:ff:dc:c5:e9:96:f5:d0:5e:66:72:31:
ee:d0:2f:62:c9:77:3a:39:e5:69:5a:60:81:54:ec:ae:fe:51:
79:e5:56:32:16:62:be:26:1a:68:ab:31:4f:c1:be:06:b8:f9:
e3:2d:90:cf:c8:fd:73:93:3c:9d:c4:dc:84:46:d1:05:87:e1:
5b:cd:23:9d:96:6a:23:08:79:cb:7f:de:d8:25:0d:41:21:2c:
bd:66:57:eb:6a:47:ee:80:9d:05:4c:07:98:6d:21:0a:7b:bb:
09:f0:7d:a3:e0:f4:54:5b:4f:60:83:a4:b4:c3:31:28:32:15:
e7:ac:f7:f9:99:ec:fe:37:71:bf:83:66:ac:46:10:bb:6c:8a:
48:05:9f:17:61:a4:ae:a8:4c:c4:ad:0f:9e:db:63:16:1c:68:
b2:11:04:6b:7b:9e:08:94:30:cd:1b:ee:f4:21:ad:a3:c2:49:
89:3d:96:74:32:c2:96:3d:fe:90:cd:09:01:37:3d:44:f0:10:
03:56:21:46:76:0c:01:f7:06:26:99:d8:35:28:0e:d9:47:e0:
f0:3e:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:03:59 2025 by rpki-client