Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: LwTR9Z4PiXpRxC+u1+uUDvjrwlg2B3iQXO7zokZyJnU=
Subject key identifier: 19:3D:FE:8D:80:83:F4:1F:7F:F7:EB:B0:F1:4D:C8:A1:1F:CE:00:AD
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019922552A8CBEC34183E6D562E5A4A985E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 12B5
Signing time: Sun 07 Sep 2025 04:00:30 +0000
Manifest this update: Sun 07 Sep 2025 04:00:30 +0000
Manifest next update: Mon 08 Sep 2025 04:00:30 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: NuYHSiwlu8+Zf8k2hrtgQdpGeSnx92LckfvAu7seZaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:2a:8c:be:c3:41:83:e6:d5:62:e5:a4:a9:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Sep 7 04:00:30 2025 GMT
Not After : Sep 8 04:00:30 2025 GMT
Subject: CN=193dfe8d8083f41f7ff7ebb0f14dc8a11fce00ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:76:7f:f3:57:93:5e:7c:ac:84:7d:d6:40:78:
e6:92:9c:4d:b6:e7:55:30:5a:50:f9:ed:11:b6:f6:
6b:95:fd:6c:60:45:03:86:a9:03:b1:e4:70:ea:8b:
45:59:a7:1c:33:aa:37:53:9a:32:4a:e4:58:89:97:
f4:22:41:41:c3:32:38:ba:8e:1f:17:61:25:a4:45:
51:88:f4:2a:a6:b5:42:05:84:73:e0:af:8f:c0:d9:
f8:4a:a0:da:76:99:f4:03:49:07:b1:5a:85:8d:f5:
19:23:95:9e:34:b6:50:18:85:7b:cf:72:6a:5a:67:
22:6b:58:40:54:8f:1c:58:a7:e7:90:3c:a9:22:8d:
02:f3:67:8f:f3:45:fd:85:48:ed:36:ff:5f:e6:b6:
10:95:f9:cb:0d:e3:2d:34:8b:12:b0:7b:a7:2e:1e:
16:f5:6d:0d:4c:1b:1d:f5:d4:e6:a0:6e:a6:fa:f3:
29:3c:aa:3b:f9:ff:98:9f:0a:a2:cf:f8:ab:12:b0:
0e:34:2f:7a:9a:9c:c3:ef:92:83:61:b5:da:65:ed:
73:98:ba:2b:47:d0:fb:8d:c3:04:bf:c1:72:ed:96:
b1:56:ec:c1:cf:40:91:31:6e:23:81:ec:0c:63:3a:
b9:06:c4:9c:0b:ac:4b:5f:43:20:59:5f:bb:68:19:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:FE:8D:80:83:F4:1F:7F:F7:EB:B0:F1:4D:C8:A1:1F:CE:00:AD
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:1a:2f:23:07:4a:73:f1:ab:3e:d8:8b:3b:30:df:aa:15:
8c:de:35:38:7b:d1:10:0f:3b:9a:5e:f3:6d:0d:25:ff:a2:90:
fd:6a:33:b4:21:03:b9:38:33:09:ed:e7:df:62:37:ee:95:47:
d3:9d:0b:1c:b0:3b:90:54:fd:73:21:94:9e:2f:6b:05:3a:eb:
fe:78:94:0b:1e:a3:0d:70:9e:76:58:04:b3:2b:34:b7:c7:93:
f7:76:a2:f9:0c:8f:89:8f:db:a0:b1:bf:09:60:fa:b4:fa:ca:
eb:b1:55:5e:1d:c6:f8:e9:aa:22:be:97:0d:dd:58:e9:db:9f:
b8:b7:57:f7:9c:32:be:d9:49:ff:92:90:67:58:9b:ae:e3:83:
41:5d:e5:ff:5b:35:de:17:a0:95:60:a8:22:af:43:9a:8d:e8:
b7:57:0a:34:32:6a:1d:85:6f:73:17:a3:5b:5b:93:1b:b3:ed:
85:32:27:44:15:65:92:a3:df:1e:d6:56:85:9f:98:f2:f9:a7:
6d:6c:26:44:ec:ea:64:7c:73:6c:cf:1c:6e:75:da:95:81:15:
ee:15:0d:4d:17:8d:f5:b6:c5:77:e5:2f:f1:e8:a9:39:42:05:
5f:58:85:3c:8c:97:09:f8:a1:f8:0a:3a:2f:a1:e8:e4:00:0b:
66:79:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:21 2025 by rpki-client