Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: aeT/9ialI+EOf8EZE11otfcqJE+rhZl18nxZuEmJ59s=
Subject key identifier: D2:69:E2:BC:CA:1E:48:D3:B4:52:E5:99:48:F5:FB:21:9A:B9:D9:B3
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0199221F444FF91815C011AA0EEC6BF523FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:38 +0000
Manifest this update: Sun 07 Sep 2025 03:01:38 +0000
Manifest next update: Mon 08 Sep 2025 03:01:38 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: VGiD6YpZHZ07HUa7L6TC8u/Zfh77DEdZhKSZOHmIum4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:44:4f:f9:18:15:c0:11:aa:0e:ec:6b:f5:23:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Sep 7 03:01:38 2025 GMT
Not After : Sep 8 03:01:38 2025 GMT
Subject: CN=d269e2bcca1e48d3b452e59948f5fb219ab9d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:6c:98:18:c8:98:65:37:59:7b:73:25:08:
c3:12:70:71:16:c1:0a:36:cf:2c:02:f9:a5:20:24:
23:57:8f:cd:27:c0:58:94:c1:6f:73:8b:26:fc:80:
e6:35:97:dd:2e:4e:46:03:1d:c8:2d:b5:a5:69:df:
82:57:d6:13:b0:24:66:1b:22:24:e9:ac:e3:80:2d:
51:b7:f5:e5:1f:7d:32:ff:08:a8:0a:28:ac:72:6e:
64:6a:e4:ff:e5:2d:5e:75:e9:11:b1:ac:d0:ba:ea:
7e:60:ad:6c:25:20:cc:38:3c:70:e1:98:bc:e0:53:
27:52:b7:75:31:91:bf:74:0b:44:ea:2e:10:80:9c:
5a:dd:a0:d4:96:14:1f:4e:08:ac:21:57:34:31:6e:
d0:fc:04:ea:39:4f:ce:63:21:75:99:a0:a2:71:0d:
f4:fb:6b:17:e0:74:55:94:6f:6c:57:36:24:67:bd:
ce:9c:d1:89:3d:50:22:ae:5f:d5:85:f6:8d:cf:58:
a4:5d:50:dc:8d:0f:94:78:18:d7:ac:ee:21:c8:f1:
5b:f5:3d:0b:d0:31:f5:78:f6:ee:da:56:ce:dd:77:
0a:4f:60:d0:b5:da:42:f5:19:30:9c:82:94:1b:52:
2e:7f:4f:92:00:3c:5c:e6:b0:46:68:b8:d2:71:d0:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:E2:BC:CA:1E:48:D3:B4:52:E5:99:48:F5:FB:21:9A:B9:D9:B3
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:7c:e4:ed:07:90:0b:e4:df:e6:6c:8c:16:c5:a7:2d:d7:
e0:e0:9e:87:db:2e:ea:b0:91:00:fb:ce:eb:58:a6:ed:df:20:
63:06:91:13:f1:e4:d8:b7:53:d5:f7:7c:1e:b0:7b:27:e0:4f:
bb:bc:3d:09:d0:22:c5:97:b1:06:7d:de:1f:b3:21:1b:9b:40:
8c:37:19:c2:4a:98:7e:52:88:fa:fa:70:51:21:9b:55:f9:e8:
66:44:06:a3:c1:9b:be:b4:f6:ac:fd:0e:84:7a:14:21:74:fb:
b5:19:6a:2d:28:0a:46:ea:5a:53:fc:41:96:5b:0a:c1:ec:5a:
3d:96:5b:19:07:5a:bf:21:92:75:a5:b6:bd:09:e1:91:66:f6:
f7:26:b4:38:8f:bf:15:1a:de:8f:07:73:c7:48:56:19:95:b3:
df:41:9d:13:57:c5:77:1f:fa:87:56:6c:a7:19:e3:61:cc:db:
79:24:cd:2e:3e:74:f9:6b:0b:21:4c:60:6a:02:fe:78:a8:18:
71:c0:9b:71:13:fb:70:05:0d:b9:4a:99:09:22:6f:db:1b:6d:
6f:4d:db:8c:3b:c7:20:f4:52:11:c0:94:68:2b:1c:15:0c:01:
89:cb:c4:db:4e:f4:0b:d6:b7:71:76:75:16:5c:a5:3e:98:f5:
2e:94:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:23 2025 by rpki-client