Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: 1Le1PKoHrbRMbFdFjnl1/zHcRuQlmAz8b7uADvYQExU=
Subject key identifier: 6F:1B:79:F9:21:23:0F:92:F3:08:A9:82:D0:06:AD:74:2D:34:85:A8
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019923D6073FCFB3EA34C249661BC612CE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0B9F
Signing time: Sun 07 Sep 2025 11:00:53 +0000
Manifest this update: Sun 07 Sep 2025 11:00:53 +0000
Manifest next update: Mon 08 Sep 2025 11:00:53 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: cbBk/i1H9M4jSMcFA2KVXyPz+MtVtoaoAeR9cEneTss=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:07:3f:cf:b3:ea:34:c2:49:66:1b:c6:12:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Sep 7 11:00:53 2025 GMT
Not After : Sep 8 11:00:53 2025 GMT
Subject: CN=6f1b79f921230f92f308a982d006ad742d3485a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:81:62:4a:11:e3:d5:98:4b:a3:b2:1e:c7:
fa:20:ab:a4:bf:c3:14:e3:d9:00:47:24:83:5d:07:
3c:3f:40:db:28:e1:ab:1f:b5:b7:90:47:91:4a:81:
30:ec:f2:e3:ab:7e:ae:0d:5d:a7:f7:d6:79:90:f1:
73:f7:c2:f6:d4:b0:a3:7b:9c:2e:e4:3b:1d:7f:ce:
30:89:17:f7:5f:36:37:aa:2a:1d:46:86:56:64:71:
93:2f:ce:6d:c6:45:d8:df:6f:9b:9c:b0:1a:1e:9a:
d8:9c:27:bd:37:f8:a7:10:b9:82:5b:25:d4:f2:e1:
02:aa:2d:ab:e5:49:2b:d2:11:a6:46:02:ad:cc:54:
24:30:18:4e:4b:0f:d9:a3:61:e3:77:5f:74:4f:b7:
eb:1a:5d:86:8b:59:05:eb:db:1f:2e:53:6e:05:5b:
e4:96:ac:69:22:9e:ca:c1:73:ca:66:ea:41:4a:b7:
d5:26:ac:b2:cb:18:37:75:0d:ec:f4:49:3e:ac:08:
1c:c0:b7:00:97:87:ce:2e:7d:99:47:db:bc:a0:c0:
75:51:58:2d:46:b3:76:5e:0a:63:62:2a:84:77:10:
0e:ba:22:52:41:0c:b5:01:5b:5a:50:2b:31:08:ca:
a5:9e:7d:95:ee:9a:06:70:bd:01:3c:06:65:b7:5c:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:79:F9:21:23:0F:92:F3:08:A9:82:D0:06:AD:74:2D:34:85:A8
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ae:29:28:78:f6:b5:30:f3:60:80:43:ca:03:55:90:33:08:
d0:47:9b:c5:ff:e6:f0:7f:88:52:a8:13:03:54:cb:01:24:84:
2f:10:e5:f7:ce:90:c1:0b:6a:99:e4:0a:a9:45:45:e7:77:00:
3c:b2:4d:0a:e1:78:9f:95:65:1d:f5:31:82:4b:94:28:46:13:
0f:b2:7b:f1:45:2c:d7:92:78:f8:53:18:55:a6:89:59:5c:6e:
09:f4:69:f0:09:70:89:b0:03:5f:ba:7f:e4:37:7a:13:16:37:
f1:87:24:3a:5a:c1:f3:71:b0:7b:9d:e8:d8:36:94:9f:04:2f:
c9:27:18:c5:eb:55:70:4d:81:c9:c1:a5:d6:28:a0:ef:06:96:
f1:d4:f8:c2:eb:4b:ec:1e:4b:e7:b4:de:06:98:78:3b:17:db:
71:a1:de:e6:b4:c5:54:b3:d2:1a:bc:ab:de:55:39:f4:09:47:
c8:18:1b:67:54:50:13:78:73:99:02:0a:d5:c3:2f:1d:8c:45:
63:09:54:1c:bc:8d:b0:e0:a3:94:6b:df:fa:1b:3d:06:af:5a:
32:ca:81:1e:4e:67:02:be:43:34:c9:93:c0:14:7b:22:89:e2:
32:a3:8b:3a:35:d7:02:61:4f:d5:fd:9e:51:3b:77:0e:99:ea:
c3:ad:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:29 2025 by rpki-client