Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: v/3l4891xujvil/36blFZEudKQdAkWupCvXJK4NXmxM=
Subject key identifier: 94:DA:B8:A2:E3:99:2C:D8:CF:B7:FC:4C:47:9D:85:69:9F:B5:39:C5
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019916F616DEBABD0AC623C7FA6E8CBD282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1670
Signing time: Thu 04 Sep 2025 23:00:50 +0000
Manifest this update: Thu 04 Sep 2025 23:00:50 +0000
Manifest next update: Fri 05 Sep 2025 23:00:50 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: Sr8AvOjLtaW/ySRCFDLIpAd2c/+jbpmvNPjzs4gcXdk=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:16:de:ba:bd:0a:c6:23:c7:fa:6e:8c:bd:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Sep 4 23:00:50 2025 GMT
Not After : Sep 5 23:00:50 2025 GMT
Subject: CN=94dab8a2e3992cd8cfb7fc4c479d85699fb539c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:f6:fc:09:35:f6:15:51:66:a0:8a:9f:d7:
4c:65:a5:82:9b:fe:2a:e7:66:5e:60:3e:89:54:2a:
41:fd:71:d2:35:db:bf:80:11:c7:03:ae:c1:2e:6e:
4f:1a:44:79:b5:7a:61:19:fd:92:b3:b3:55:7e:3b:
22:78:a6:74:f2:b3:75:bf:f3:8c:81:c0:e4:a3:76:
c4:28:a4:54:cd:c5:c9:73:b9:b5:3c:7d:60:55:88:
ec:a7:a7:79:41:73:36:fe:a5:e9:78:52:35:44:44:
24:d3:d1:76:6c:c7:96:f3:2d:aa:c8:9f:15:21:70:
93:28:9d:97:22:62:09:27:e5:50:6c:ea:a1:89:05:
5c:46:ea:2d:cd:a3:07:21:16:88:8a:1c:c6:e4:4e:
04:45:e0:93:da:9e:af:22:2d:61:53:35:16:49:49:
54:4b:e7:cf:47:ed:16:da:e4:54:e5:bd:fa:89:80:
60:05:0b:c9:b2:7e:b4:2e:5f:8a:be:c0:9a:b0:0c:
5b:56:a0:21:9c:37:a2:3a:98:24:29:5d:54:de:cd:
a1:8b:fe:00:7e:86:b6:4e:a9:b7:b4:eb:e2:25:43:
06:4a:f2:9c:9b:05:6c:ab:7d:68:07:aa:07:09:9d:
08:21:d0:71:fa:fb:4e:2a:6b:d6:7b:fb:11:12:29:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:B8:A2:E3:99:2C:D8:CF:B7:FC:4C:47:9D:85:69:9F:B5:39:C5
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:4d:7f:55:d1:e7:9c:2a:12:57:c3:a9:53:bc:e3:58:01:
1d:e9:fb:27:f1:43:ba:4e:ab:e3:31:63:3e:2f:78:16:1a:d4:
51:6e:e3:a6:7c:0f:66:24:87:7c:46:77:43:f9:30:39:68:0c:
2d:45:ef:60:4c:e1:a7:fd:58:8c:7a:40:c8:d9:de:cb:ba:38:
43:ae:d1:67:33:13:7f:a6:a8:bd:0a:da:c5:b8:5e:c1:23:fe:
35:00:5b:dd:88:cf:15:57:6a:5b:20:3b:bd:cf:7a:21:2b:ff:
d6:2d:87:f9:bf:c9:8e:2f:e2:20:5c:a5:d7:ac:0a:e9:9d:89:
90:92:e6:0e:13:c8:fe:52:bc:2d:a8:74:58:43:73:b0:ef:39:
fe:25:5c:40:d1:2c:43:ba:95:f5:5f:0d:e9:fa:fe:f5:76:1e:
29:51:72:94:60:9f:6c:25:16:15:f8:a3:fa:3e:b1:75:5c:c7:
14:fe:85:a9:7b:25:b0:57:7e:9d:13:4b:32:cf:e3:9a:0f:24:
9e:60:bd:1b:aa:cc:a2:4a:2f:08:e8:92:07:b4:87:da:3d:64:
37:51:23:e3:fc:89:f0:f3:25:69:30:fc:ff:77:ba:2a:4e:b2:
3b:03:a3:c8:cb:2a:f6:f4:73:6b:04:0e:ff:9b:f3:e1:9c:88:
34:36:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:08 2025 by rpki-client