Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier: ZiAot5/Ii/TiMl9aEwFSYLDzdgjrZVlhHlbc+DKQVgQ=
Subject key identifier: 7C:96:C7:4D:28:68:63:36:B4:A6:15:DE:36:74:03:93:5D:77:76:B0
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 01984AAE8B8FE1B4E5DB60A642BF3EAC1FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number: 0ACF
Signing time: Sun 27 Jul 2025 07:00:09 +0000
Manifest this update: Sun 27 Jul 2025 07:00:09 +0000
Manifest next update: Mon 28 Jul 2025 07:00:09 +0000
Files and hashes: 1: F3oEv0QBT7ejRZnF2aTKoyEK5cI.roa (hash: MTTLBQPL1aOScQOGtAiCwXpSCEzlrz60TWKC9wTFgO4=)
2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: 6UFykhP1d6BLa3cDJ+T/kodMJlmiHXmgnav33By8f/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8b:8f:e1:b4:e5:db:60:a6:42:bf:3e:ac:1f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Jul 27 07:00:09 2025 GMT
Not After : Jul 28 07:00:09 2025 GMT
Subject: CN=7c96c74d28686336b4a615de367403935d7776b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:1b:dc:ee:fb:1e:f8:cb:b5:3a:c2:4a:74:
71:9c:13:d5:e4:aa:78:7c:ad:6a:b1:72:22:b6:4b:
e5:f8:e2:44:6f:98:bb:f4:c1:d2:86:11:b1:a9:27:
22:17:0b:17:26:2f:bf:70:64:ea:9f:8b:8d:88:c2:
b2:cb:d3:e0:80:17:40:0d:14:61:af:4d:2b:89:42:
22:b3:55:66:3d:60:9f:3e:59:e6:1f:00:b5:9f:d0:
bf:54:28:61:5d:58:a0:db:77:44:06:c4:93:a2:b9:
3b:73:16:cd:65:23:f1:8d:5a:8c:ca:72:95:39:be:
25:ae:50:99:51:af:59:1c:a5:bc:99:c8:c9:2d:82:
13:0e:4f:b4:ad:83:ac:25:f5:2b:41:14:66:f4:f4:
57:3c:8b:de:50:f5:bf:ac:40:ce:86:45:81:cd:50:
f5:dd:7e:97:43:ce:21:b5:7f:f6:c3:e5:77:62:b7:
5f:5f:af:3c:b1:87:88:f4:13:94:23:87:cc:0a:30:
c5:92:b6:98:49:4c:43:2e:8b:cf:89:ce:9f:59:a2:
9b:0a:42:09:1f:0c:a4:f0:c0:78:08:78:c5:c1:d0:
94:55:59:d2:b2:43:cb:4a:92:88:b8:75:80:05:d9:
25:ab:cf:fb:ef:15:ea:cd:85:ce:8f:8d:78:af:8c:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:C7:4D:28:68:63:36:B4:A6:15:DE:36:74:03:93:5D:77:76:B0
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8b:00:cd:62:77:3b:22:94:f7:d3:4a:8e:c6:59:53:1b:b2:
88:de:a0:17:39:de:e0:86:d5:97:35:02:31:46:71:e0:e3:ac:
ba:7b:e2:33:f5:2c:6f:8d:0b:c1:a4:fc:6b:f3:d8:de:52:70:
ff:8d:76:db:ee:ad:fe:67:56:8b:15:68:f5:d3:f4:9e:65:11:
d3:6f:eb:79:32:a5:a1:bb:85:7b:3a:31:ca:11:7f:18:9d:ab:
ce:b6:8b:e4:fa:dc:ad:dc:1d:34:e4:2f:c5:8d:87:3a:ac:4b:
85:8f:cf:89:3e:55:1f:a8:b9:73:4c:19:39:e0:1b:42:84:b5:
06:8b:3e:5f:db:3f:02:c5:72:47:2c:9d:ce:e1:df:66:57:8d:
d6:26:46:8a:05:da:ec:f3:c9:81:5c:3d:71:70:d4:1e:c3:5e:
a9:ce:46:be:a7:53:b5:ae:c7:33:6a:29:19:2f:b7:ef:58:f1:
3b:df:f3:e6:9e:92:98:31:00:1d:84:6e:99:4d:a9:17:8e:2f:
de:d8:06:f0:d1:5e:86:b8:68:b0:ad:56:21:d9:f0:6e:ab:d6:
3b:df:d9:f9:50:60:49:5d:8e:7b:12:aa:91:29:f8:11:62:0c:
8a:a7:b4:4c:3e:30:40:07:75:84:0b:b0:3b:31:c6:3e:53:81:
52:e4:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:40 2025 by rpki-client