Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 4DZIgOLGJsh0f8XYL/LE0jIYcHoh7VTAaunKeUYxEgM=
Subject key identifier: A2:2F:94:FD:65:54:A1:F5:14:82:9C:2A:D5:C7:9F:05:AF:F9:BA:AB
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01984965219A7D4391D323428D835915E36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0B8D
Signing time: Sun 27 Jul 2025 01:00:21 +0000
Manifest this update: Sun 27 Jul 2025 01:00:21 +0000
Manifest next update: Mon 28 Jul 2025 01:00:21 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: oGR6vI2B8AbqjJRHp/pOjvCZVbaQq1t9zU9cV0lZQiM=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:21:9a:7d:43:91:d3:23:42:8d:83:59:15:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jul 27 01:00:21 2025 GMT
Not After : Jul 28 01:00:21 2025 GMT
Subject: CN=a22f94fd6554a1f514829c2ad5c79f05aff9baab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:b2:06:6a:72:c9:78:cd:be:3b:22:ac:8c:
81:cf:24:42:0c:c6:70:ce:69:d7:c1:3a:6e:de:80:
3d:9d:98:a3:ff:24:90:e1:fc:01:1b:34:a2:42:69:
e5:41:80:ea:86:33:2a:6f:cd:ef:f4:fb:d9:29:be:
6f:cf:2f:a8:9a:54:31:a0:7f:75:25:4e:a4:9c:4e:
b5:74:c9:3f:96:51:70:63:3b:15:12:a9:cd:42:d9:
43:c9:be:cd:14:f2:da:52:11:38:9c:6a:74:a9:91:
cc:71:a5:98:90:a5:9d:9d:f3:bf:38:11:be:fe:26:
77:df:f8:72:c1:e2:02:96:78:c9:53:b8:8b:18:f4:
f3:81:a0:db:5b:84:32:c3:31:2a:1f:a1:f5:ef:c9:
db:0b:38:b1:61:3e:1e:17:ce:11:ed:d6:8f:52:0d:
fc:a0:f6:54:d3:f7:3b:e1:47:07:41:07:08:83:08:
a0:ce:cd:20:fe:f2:23:86:cc:e1:84:a8:8c:2b:54:
9e:e5:b5:68:21:a3:ea:9c:01:b7:a0:77:32:2a:44:
0d:66:22:e4:9e:79:b9:3b:77:c5:a2:9e:61:60:ff:
29:1e:fb:4d:0e:60:27:20:c3:fd:a4:48:7f:df:c2:
1b:27:9a:ec:2a:6c:d1:61:96:0e:3d:72:22:7e:b5:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:94:FD:65:54:A1:F5:14:82:9C:2A:D5:C7:9F:05:AF:F9:BA:AB
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:20:17:e8:75:ba:8a:9d:bb:ac:d7:c4:90:3d:a5:45:93:
8c:02:8f:a2:63:e6:7b:59:0c:91:8b:4e:91:76:1b:4d:dd:bb:
61:65:39:89:29:61:bf:22:40:1a:c2:f1:6c:ca:0f:cc:91:df:
db:cf:29:2f:2d:5c:90:c9:33:74:0b:62:2b:d3:6b:0f:0a:83:
9b:76:99:d6:79:4f:a4:e8:55:68:95:cd:f1:e9:c3:69:b8:a4:
4f:7c:2a:53:83:98:3a:59:14:9e:e5:5a:e8:2c:36:af:39:1a:
ae:cc:53:d5:9b:1e:d2:4a:98:0c:92:50:03:35:f4:df:ca:35:
18:98:bf:25:7b:02:a9:a3:fb:96:7a:6c:a8:74:6f:7f:5f:5a:
80:b8:15:c1:36:d0:73:cb:d2:a2:e3:cb:8e:34:29:d6:23:4d:
b5:16:d6:6a:de:42:1f:58:d0:63:c2:5a:e0:4a:fa:95:a9:68:
1b:dd:34:9e:9a:63:62:4f:f3:de:01:1e:fe:c9:74:66:8f:47:
b8:94:45:bd:bc:46:a4:e3:57:42:b0:57:81:60:ae:07:d7:5d:
fa:85:48:9e:68:21:e9:4b:11:6c:89:24:d0:89:7b:8e:a4:07:
58:10:c8:ef:2c:52:22:18:21:b0:13:70:1b:98:3c:4c:cd:26:
b6:21:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:47:24 2025 by rpki-client