Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: 1ZbvHnodrSFEppl69RsgodZir597KdVOtUszcvUE5nI=
Subject key identifier: F1:6E:E0:19:8B:6E:3D:83:9F:BE:63:9B:C1:63:FE:6D:37:BC:64:C0
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 01992367C1025B7F369CB4AD67365D3B0613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 5F
Signing time: Sun 07 Sep 2025 09:00:25 +0000
Manifest this update: Sun 07 Sep 2025 09:00:25 +0000
Manifest next update: Mon 08 Sep 2025 09:00:25 +0000
Files and hashes: 1: iZ5NdmCFL2KJkofQQF0JS-Yd9_o.roa (hash: B8ZarSuY+q0UuVgF85bF6OWHBT26B3wpaZ1iEoRwKdI=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: eV4QFHrxTgY0fkTPvuayqhiduScdcdxfeIvVkjQ2xoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c1:02:5b:7f:36:9c:b4:ad:67:36:5d:3b:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Sep 7 09:00:25 2025 GMT
Not After : Sep 8 09:00:25 2025 GMT
Subject: CN=f16ee0198b6e3d839fbe639bc163fe6d37bc64c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:c2:d1:7e:af:5d:e1:4a:52:2a:ff:7f:a8:
b3:af:56:1c:a4:f9:e3:36:3d:b9:ea:42:99:4d:36:
d4:49:5e:33:e5:90:92:e9:d8:25:85:bd:dc:b3:76:
ef:54:1f:a0:21:0d:1b:89:1d:eb:50:4d:2a:d1:a5:
d4:2c:d1:ee:89:ac:7b:f4:54:63:d4:fc:ef:d7:26:
36:f4:fb:c2:ed:48:30:70:db:37:9e:d8:75:dc:65:
a5:26:57:f1:3d:5f:6c:a7:00:cf:5e:57:10:5f:ae:
a1:78:6d:89:90:5e:0a:8f:be:95:12:ef:34:9a:8f:
00:a4:04:3c:a0:45:67:84:8f:42:27:34:1c:4f:4a:
d9:6c:4c:fa:98:4c:2b:ad:e4:fd:b3:bb:41:30:f6:
2c:5a:02:b2:c1:b8:79:68:bf:d8:fb:bc:e0:16:40:
ba:5a:21:53:7b:23:19:8e:bf:f1:51:8c:c8:f1:ee:
ea:d3:8d:40:77:d4:a7:04:bd:3e:8d:c8:94:1a:c5:
c7:ca:40:30:9e:6e:b2:7b:38:38:33:c5:15:a6:30:
8c:10:4b:74:b8:3d:68:87:a2:51:e2:84:94:dd:6b:
f3:24:91:5b:9e:15:6b:7a:e9:65:74:01:3d:21:48:
87:ca:db:e1:e3:00:b9:47:11:cd:ea:1b:58:2d:9a:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:E0:19:8B:6E:3D:83:9F:BE:63:9B:C1:63:FE:6D:37:BC:64:C0
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8a:83:f2:94:86:a2:0f:4b:c8:85:97:7f:4b:fe:0f:16:60:
fd:48:94:ca:8d:0e:ae:3a:bd:42:1c:54:08:96:07:74:ec:d1:
e2:61:97:b1:6c:2c:f5:2d:1b:8c:fa:ce:81:f1:8b:b0:06:f0:
68:3d:e0:af:7f:71:a7:99:69:de:56:4a:8a:7a:9c:1d:58:a9:
c2:4b:84:0c:ba:91:52:cb:9a:7e:9b:c4:fb:05:26:81:d3:76:
ee:b3:08:da:c1:7b:54:5c:d3:b4:3e:b6:e5:e4:eb:3f:2f:ea:
17:18:c0:b0:a0:15:e1:a7:04:98:43:4d:38:d0:5a:48:9c:52:
f3:39:79:10:98:d4:4d:55:fa:7f:87:71:63:b4:c1:84:a0:7b:
12:f1:3e:55:95:63:89:5c:dc:31:56:3a:4f:df:a9:33:ac:9c:
19:b9:e8:ed:89:6f:f0:45:95:5e:b2:5d:c8:e9:16:f1:ff:3a:
52:18:cb:87:bc:5d:17:41:d4:c6:9d:28:9d:57:28:61:8e:3a:
16:fc:54:b5:63:b3:4c:a3:e4:b3:c3:60:1a:fc:4e:2b:7a:5d:
5d:c7:4a:d1:69:6b:78:4b:ac:68:f7:45:02:15:50:05:8a:20:
e6:5f:3e:49:4f:e9:7f:7b:9b:79:53:8e:f5:19:6b:51:c7:a9:
fe:dd:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:23 2025 by rpki-client