Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: JVKY0scu8rJPPf2Yvs/Mh1XmjffPfhEKUy9DRTnitpM=
Subject key identifier: 6F:35:BC:6E:30:31:20:AC:9E:65:73:37:A8:5A:84:1F:47:6A:F4:20
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01983CBC70523ED92E592972438F7D5E96F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 14:00:39 +0000
Manifest this update: Thu 24 Jul 2025 14:00:39 +0000
Manifest next update: Fri 25 Jul 2025 14:00:39 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: /yawfQxrYsPUjQCRJBv0jBigPYZ6pyyu7rgrhjWRCko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:70:52:3e:d9:2e:59:29:72:43:8f:7d:5e:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jul 24 14:00:39 2025 GMT
Not After : Jul 25 14:00:39 2025 GMT
Subject: CN=6f35bc6e303120ac9e657337a85a841f476af420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:54:7b:67:e4:84:50:64:d7:ac:e8:cd:dd:
ef:0f:81:b7:97:38:c4:a5:76:f4:06:6d:bd:b2:53:
4b:fb:9d:ea:41:65:46:09:b0:10:25:ac:8c:7b:74:
e4:76:16:20:3c:65:61:38:85:9a:38:61:01:29:2e:
40:6e:ac:aa:da:d8:44:c8:e9:5a:30:ac:78:f6:b6:
db:56:a1:a0:97:54:84:82:4d:be:c2:1f:e5:a8:4e:
63:51:d5:24:ae:dc:ea:27:0d:22:26:0a:92:24:11:
ab:96:87:d5:26:27:62:79:3f:03:35:71:9a:ea:41:
de:0b:96:3f:b7:38:59:50:c7:77:4b:6a:40:f2:6e:
76:f5:fb:86:4c:43:8b:35:cb:20:dd:f0:6c:a4:33:
03:9d:4c:31:bc:69:5d:64:b3:2d:b1:b7:2f:8d:92:
04:a1:d4:0e:d5:44:34:65:19:5f:ce:48:cb:7a:b1:
25:bc:5f:3d:b2:0d:11:7b:55:22:51:39:8b:27:be:
24:94:d5:6c:80:b0:62:f0:4a:8b:26:f5:9e:b1:c4:
32:7c:a4:d7:dd:c5:1f:9f:43:b2:0f:fe:f0:41:83:
ad:55:dc:3e:b8:f0:bc:43:68:f4:31:4c:1a:11:11:
cb:58:ea:d0:24:c4:73:f1:74:cf:c1:1b:2d:9e:34:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:BC:6E:30:31:20:AC:9E:65:73:37:A8:5A:84:1F:47:6A:F4:20
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:60:36:27:c1:d7:de:85:4e:df:9a:b9:ef:ef:80:30:26:
3e:28:0c:84:1b:ab:fe:90:c9:b5:d5:89:25:5c:d9:44:4e:e7:
0f:10:74:76:fe:e3:fe:0f:9b:d6:0e:07:a2:a3:9c:d6:5e:f7:
78:4c:d3:bb:94:12:f2:45:75:76:29:6a:a0:11:74:38:07:c2:
16:e6:ae:b1:3e:24:e5:0c:b1:09:2b:3e:73:ac:94:68:1b:27:
fa:9b:28:b9:d7:f6:e5:a5:18:b3:f0:f3:90:d1:0c:85:11:b8:
73:92:0b:6b:60:55:c0:8e:33:ef:85:cc:46:cb:71:0b:aa:db:
42:14:f1:d1:0c:72:0f:5b:b3:8e:a2:6a:d6:52:c3:74:a5:7b:
12:2a:b7:b6:2b:88:f1:0e:9e:4b:54:a9:59:19:fc:42:57:d0:
31:32:04:42:9e:d1:05:ff:05:ee:b5:9b:47:8f:5d:5e:8d:15:
7b:c0:11:6c:f4:8b:d8:8f:91:01:d4:8d:07:62:6a:61:46:8a:
10:cd:fe:a8:eb:4a:7e:77:c4:11:5c:98:81:a6:03:b0:2c:b5:
a5:8f:73:95:55:d2:34:f1:66:25:3a:d9:aa:28:5b:16:7c:39:
1f:7e:e6:6a:41:b9:e2:1c:e8:ff:86:dd:9e:63:37:e6:8e:eb:
35:82:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:47:55 2025 by rpki-client