
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: wdHGVCB+qW6zvJK0M9wqhakB0XuvUhYIrezpcCf4PiQ=
Subject key identifier: 90:CA:39:83:6E:26:9E:8D:B9:28:63:CD:F2:DD:13:19:93:AC:0C:87
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019848F708C8F361A4FEC7DFE5370DF2A079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0ED1
Signing time: Sat 26 Jul 2025 23:00:05 +0000
Manifest this update: Sat 26 Jul 2025 23:00:05 +0000
Manifest next update: Sun 27 Jul 2025 23:00:05 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: +WYXD6UTgVw2AlIDD7Ob0S7oJlJd4r4Byg+dRib+svI=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:08:c8:f3:61:a4:fe:c7:df:e5:37:0d:f2:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Jul 26 23:00:05 2025 GMT
Not After : Jul 27 23:00:05 2025 GMT
Subject: CN=90ca39836e269e8db92863cdf2dd131993ac0c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:ab:35:97:3f:17:03:9e:7b:78:44:d8:8c:
92:60:46:b0:88:df:f8:6b:97:4e:d8:b8:3e:d3:7c:
76:90:45:1f:2f:5f:27:7f:d6:c4:71:ee:a9:50:8e:
4f:fd:be:eb:01:06:5f:13:69:de:8d:ee:f2:c0:2d:
eb:ed:6f:a1:9b:4a:55:c6:b4:1d:5a:76:19:12:fa:
2a:db:70:2c:90:e1:b0:d5:54:b0:37:6b:c3:2f:f0:
6e:76:22:66:fb:f6:86:22:56:32:74:3d:3d:e2:a8:
bb:d3:e4:00:4b:70:8a:d3:c9:46:bb:eb:bf:cb:b2:
77:f8:95:2b:6d:ed:e8:5f:6c:7c:cb:49:51:41:da:
e2:10:94:b5:02:35:5f:56:a7:b2:3e:4f:93:7c:6f:
2c:61:69:80:d7:9f:7c:a7:b0:1c:bb:1d:96:90:ac:
36:47:6b:40:f7:50:80:22:b4:1d:5d:d7:f6:4a:6d:
c0:97:a8:32:53:10:ed:c9:af:ab:ef:47:4e:c0:a3:
3e:3e:c4:aa:03:53:8b:11:e4:b4:6f:38:e9:a5:db:
a2:1b:60:d9:cb:35:47:58:b6:fb:92:68:68:9f:bb:
78:ba:7c:41:b8:c2:88:42:2e:56:f7:94:82:70:f1:
23:1d:76:19:ee:e0:51:c3:63:01:b2:41:db:1c:43:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:39:83:6E:26:9E:8D:B9:28:63:CD:F2:DD:13:19:93:AC:0C:87
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:08:4f:73:fa:90:b8:64:e6:50:a8:17:77:ac:bd:63:b9:c1:
27:47:5c:22:39:b3:4a:76:5a:33:a1:f3:9c:40:f9:5b:92:3d:
e2:99:7d:a1:0a:88:75:48:2a:ff:bb:37:83:26:b9:82:3c:ff:
78:6b:ea:fa:76:bb:f1:99:55:70:10:93:67:2c:dd:bb:8e:9c:
40:78:1a:90:a9:d2:76:35:5b:6e:fc:33:9f:fe:b4:d7:7b:88:
ba:fe:93:52:f1:1a:d1:5f:49:71:96:55:16:e1:56:bb:27:23:
dd:1c:7f:60:12:2a:0b:da:b0:90:6b:de:0a:29:48:b4:7c:23:
ff:69:70:5b:26:76:e5:87:df:17:39:da:84:dd:33:a0:39:f9:
18:57:f7:a6:f1:bc:56:40:9e:d0:a7:60:49:ff:5a:56:86:66:
99:ae:9e:c6:b2:81:33:5e:81:f4:6b:bc:09:61:98:f7:de:e5:
90:e4:c6:42:df:2c:0f:d9:30:8f:17:97:10:c8:39:c9:59:be:
d9:bb:49:44:23:28:54:16:ca:72:bb:e2:24:04:96:03:82:35:
9c:d0:27:b4:35:a0:3e:cc:c0:b4:f8:44:1d:cb:77:4f:34:26:
33:c0:ff:c6:8c:0a:d8:e1:df:1f:1a:a0:a0:03:62:29:7c:53:
a8:43:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:19 2025 by rpki-client