Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: G0JOJusZQDRIgskqhH8HRbDF+EDymjTTXN93cNmiDhM=
Subject key identifier: 3E:1A:EA:94:B0:01:CD:28:6E:C2:29:90:62:AF:B7:B5:01:4E:B0:15
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0198439AB4E05AB76A07E7965B04ED4CACF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0FD1
Signing time: Fri 25 Jul 2025 22:01:08 +0000
Manifest this update: Fri 25 Jul 2025 22:01:08 +0000
Manifest next update: Sat 26 Jul 2025 22:01:08 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: Lpmazmaniokn3icDLQWN9lkGtdtdXw50NbtyEHRpM2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:b4:e0:5a:b7:6a:07:e7:96:5b:04:ed:4c:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jul 25 22:01:08 2025 GMT
Not After : Jul 26 22:01:08 2025 GMT
Subject: CN=3e1aea94b001cd286ec2299062afb7b5014eb015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:a3:c1:6f:14:04:64:9a:a1:ca:42:ad:ff:
df:e0:38:a8:5a:28:cc:70:75:64:4d:dc:3f:53:ce:
51:82:57:04:79:06:3a:ec:65:59:ab:6d:2a:b7:2d:
41:a4:ef:06:3f:7b:b0:44:13:60:5f:e2:b9:47:31:
8f:46:92:80:fd:fe:f3:ca:88:a2:56:bf:e1:04:c1:
78:ee:34:a0:37:e9:9b:0f:e5:fc:de:1b:bd:d5:5a:
3b:e1:73:da:43:d0:c6:1a:00:a1:3e:df:fe:90:f1:
1a:8f:c8:26:d6:ca:80:26:87:a9:5a:26:7d:1c:4d:
80:c5:8e:46:3c:4d:3c:e5:fe:a8:e4:c9:2f:0b:d8:
fd:9d:8b:f0:02:63:0f:b8:42:11:59:11:84:01:bf:
30:03:d9:9e:c3:c2:85:ab:84:dc:40:51:d5:8f:38:
5c:6d:81:96:2b:5d:31:08:08:d8:bf:40:0b:93:1a:
3e:4d:d1:35:93:12:54:fc:c2:97:e8:f3:95:99:b5:
51:93:be:54:c1:1e:2b:79:3c:18:d2:41:23:0a:ae:
da:3b:5c:81:5b:14:3c:64:aa:03:ac:0a:69:a6:b4:
4a:d1:8a:bb:9f:ba:4e:f7:2d:74:77:a0:f7:81:37:
82:85:81:dc:e8:fd:0c:a0:11:90:b3:47:08:af:1d:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:EA:94:B0:01:CD:28:6E:C2:29:90:62:AF:B7:B5:01:4E:B0:15
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:af:4c:38:0c:f1:33:47:b7:65:7f:a5:88:48:fb:8d:5c:
b5:0f:9c:2a:94:40:a4:c9:72:e1:9e:3b:29:80:64:43:bf:25:
8d:b0:61:95:1e:3a:97:b3:03:17:cd:95:14:ff:cb:b8:d5:df:
f7:10:26:21:0c:83:19:67:9c:fd:0f:ce:42:a4:41:a0:98:3d:
fa:74:6d:ee:e6:b0:00:15:12:35:a5:98:9e:b3:52:9e:6e:c3:
51:06:37:e2:b6:e9:c5:cf:a8:97:5f:69:6a:cb:d9:08:db:61:
bd:16:8d:b3:1e:01:13:81:fe:59:e2:ed:6c:aa:e7:55:36:e5:
c1:fc:47:b9:40:3f:8b:0d:7b:f2:d2:ed:c3:5c:7b:82:75:3d:
19:25:3b:52:cd:18:90:b7:95:12:78:46:eb:65:09:69:09:1a:
28:06:3a:f3:76:ee:dd:87:f4:f9:d7:ad:c6:ae:69:ff:6b:d0:
93:ea:41:c1:dd:b2:a8:53:d8:c6:b4:04:0c:7c:63:5d:c2:74:
e3:59:cb:2f:2b:c2:a3:5d:d8:18:73:f9:19:d5:85:7f:9b:2f:
a6:53:c6:1e:5e:58:cb:e4:fe:e5:5d:d8:ab:4b:e1:7b:9a:ef:
5e:20:a6:ec:50:8f:4e:36:3c:02:64:3c:cc:a3:bf:25:c2:87:
cd:20:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:42 2025 by rpki-client