Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: 5IimF5q0fpKXC8FzeuqpIhaWA2LF5ed37Kchd5lZ+ko=
Subject key identifier: E1:8C:18:A6:05:D5:8C:F1:7C:06:0C:C6:CC:9D:76:74:CB:29:D7:1A
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 01984CD448AD5233414C8DDCBC6B0C3E5842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0394
Signing time: Sun 27 Jul 2025 17:00:37 +0000
Manifest this update: Sun 27 Jul 2025 17:00:37 +0000
Manifest next update: Mon 28 Jul 2025 17:00:37 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: ndMbS/431QoZlT9iJZ8fuMoReVQf++p78xr3FYkQLds=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d4:48:ad:52:33:41:4c:8d:dc:bc:6b:0c:3e:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Jul 27 17:00:37 2025 GMT
Not After : Jul 28 17:00:37 2025 GMT
Subject: CN=e18c18a605d58cf17c060cc6cc9d7674cb29d71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:02:c6:43:c6:de:64:41:4f:0a:ed:2f:27:
ae:72:a5:ff:07:f0:0c:de:3e:ce:a4:e7:93:52:ff:
5e:17:4b:f8:ef:f6:89:7a:7c:1d:c4:38:77:5f:51:
95:97:65:a5:8b:51:50:ef:3a:b0:4e:6f:6c:70:70:
20:90:67:b8:cd:fb:c3:fa:da:09:77:18:31:69:7d:
53:b3:e7:b1:2e:b6:9f:50:41:17:0f:de:c1:25:e3:
ea:0d:5a:1d:5d:78:c2:ef:ed:91:f0:b3:05:64:49:
d1:be:c5:26:48:eb:ed:3e:63:37:24:28:a1:36:58:
37:ca:13:cd:b8:69:75:6d:58:e0:a4:88:94:2d:60:
3a:60:4c:0b:e8:27:35:0b:c3:47:f6:19:f4:c0:0e:
46:99:f6:0e:85:cf:5f:69:36:1f:a5:07:75:36:3d:
fd:29:20:51:8f:1e:0e:e3:fa:8c:cf:9f:68:fa:ea:
31:93:52:b4:55:6c:d0:20:fe:f8:2a:8d:0f:72:da:
c7:99:a5:f9:76:f4:f5:0f:81:8d:f1:33:16:5d:f1:
85:db:79:f6:17:ed:76:36:be:0e:df:bc:00:c8:dd:
14:40:c0:2e:c6:2b:f7:7c:9a:14:71:c4:7b:80:dc:
60:32:23:14:52:08:4e:fd:77:21:22:93:db:6d:28:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:18:A6:05:D5:8C:F1:7C:06:0C:C6:CC:9D:76:74:CB:29:D7:1A
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:04:ce:74:f6:d2:79:25:f0:8b:e0:b3:bf:a6:e8:4a:98:57:
8c:32:59:02:07:d7:18:f5:e0:73:2c:80:b8:aa:62:26:79:37:
e1:4e:66:28:fa:31:49:30:bc:fd:83:f9:95:c4:12:40:f5:2f:
55:e9:ac:eb:03:b5:02:f8:0d:f3:ed:a6:7c:d3:0c:1b:e2:92:
2a:d4:ab:54:ae:57:2f:5d:bd:2e:5c:de:71:09:93:04:11:9b:
d7:2c:68:66:1a:5c:a2:e2:fb:53:f6:3a:50:fe:96:3b:34:ca:
09:22:d4:17:b8:b1:9e:39:ab:36:9c:56:99:19:40:61:19:d8:
98:18:98:0f:b2:56:31:ad:36:fd:2e:5e:45:ba:4e:db:5e:e6:
1e:ac:07:5c:66:1a:77:c0:b9:b9:b1:8a:a5:39:bc:0a:5a:e1:
41:21:2c:36:92:b4:08:05:ff:8a:8c:3a:c0:95:cc:81:96:c8:
0a:f5:92:c7:84:7b:67:30:1f:f5:ec:27:8e:c1:e1:58:08:53:
a6:b4:55:05:b0:64:00:90:16:c6:96:68:ab:d3:13:32:eb:d4:
06:72:68:58:fe:05:55:f2:73:46:e6:29:4f:1a:6b:a5:4b:b4:
dc:09:36:27:b1:bc:4e:73:45:0d:40:67:78:6b:4e:dd:c5:cf:
87:ec:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:04:37 2025 by rpki-client