Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: UYlUWsVEnNaTGpsVZH6Pl1vvHYAUA3Hl27uRu9/6H0k=
Subject key identifier: 94:82:39:C7:7A:62:E2:2E:03:B2:6C:54:14:70:47:A8:B0:E6:6F:FD
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01983DD0229CED01A286A45456CE03F7F434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0CA0
Signing time: Thu 24 Jul 2025 19:01:47 +0000
Manifest this update: Thu 24 Jul 2025 19:01:47 +0000
Manifest next update: Fri 25 Jul 2025 19:01:47 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: ijC99gk2yK9/rv4yrWD7r4YsgwvG8Oc/T+kFXRfh2sw=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:22:9c:ed:01:a2:86:a4:54:56:ce:03:f7:f4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 24 19:01:47 2025 GMT
Not After : Jul 25 19:01:47 2025 GMT
Subject: CN=948239c77a62e22e03b26c54147047a8b0e66ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:ca:8b:f0:2a:42:1e:c7:c1:34:c3:c7:c0:
eb:2f:fc:c5:06:c5:ee:2b:60:2a:3c:7d:18:1e:d2:
cd:cc:ca:72:de:85:ed:bc:e2:31:fd:64:30:8c:f5:
ea:c9:fe:74:a8:98:45:26:8f:14:b9:5c:0f:41:0c:
b0:0a:eb:0d:c1:7d:f5:b3:e1:93:10:ee:6e:0b:9b:
00:a3:f6:d2:f6:0a:65:9a:7b:26:9f:4a:ec:5c:1a:
f1:54:be:fa:4e:59:9b:54:e0:db:c6:ae:ed:46:88:
cd:c3:7d:e1:e8:92:d6:9e:e7:95:1e:99:99:08:0b:
c1:57:14:bf:ee:d3:05:5f:a8:07:7c:21:10:92:48:
f3:c6:53:6c:24:6c:7b:66:ab:4f:29:b6:cc:2f:9e:
37:22:77:d6:ba:24:4c:ff:0a:90:e5:ca:dc:a0:8d:
e2:5e:88:ce:00:d5:e3:ec:e4:74:27:ba:81:8b:fa:
6d:ee:1a:26:2f:cd:f7:da:15:13:6f:fd:d4:db:68:
c4:eb:03:24:1d:7b:f5:c0:ca:29:7f:0e:5d:1e:73:
3b:ca:b1:d0:e6:26:ec:1c:77:82:78:98:2e:02:d6:
a5:e9:22:af:e6:44:fb:9d:43:c3:6e:1b:cb:f7:98:
f4:4b:64:9b:61:35:b7:4c:3b:1d:17:a5:81:38:d9:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:39:C7:7A:62:E2:2E:03:B2:6C:54:14:70:47:A8:B0:E6:6F:FD
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:30:a8:0f:cf:f3:06:cf:f5:e9:82:81:ba:df:4d:aa:77:
4b:2f:52:ae:16:c8:ab:ca:9c:0c:19:3f:fc:db:b0:96:24:00:
af:19:fa:e6:5a:72:21:2b:1e:ff:5a:60:4d:e6:06:e5:dc:85:
18:d2:56:f3:66:1f:9a:b1:83:0f:ee:3f:3a:d6:02:d0:6c:d8:
a3:11:57:ae:75:10:cf:59:ca:88:6b:af:31:62:3c:49:9c:ac:
ee:0d:7b:81:11:0a:5e:2e:2c:eb:de:fe:b2:82:8f:9a:af:ad:
21:65:aa:20:2f:28:3e:71:ba:84:12:6e:39:07:1f:2d:f8:3c:
bc:4f:d4:7f:6d:a6:e7:61:bf:f8:4f:93:dd:33:8f:84:dd:b6:
c6:47:82:27:5d:46:f1:31:b2:d9:c0:4d:bc:da:1b:af:d4:57:
88:65:0d:72:e8:3b:80:90:9d:59:55:97:95:40:3a:4f:3c:5a:
ab:28:65:75:22:aa:30:09:66:72:1a:0c:2c:b6:8f:74:3d:4d:
ff:12:fc:04:ea:6c:ee:fd:32:ab:61:dc:66:2a:62:29:91:38:
9a:25:57:68:28:9d:5e:25:f1:ed:81:26:df:3f:65:1c:b5:b6:
8b:6e:e2:58:94:85:40:40:13:c5:1f:41:a3:1d:9a:5d:16:9d:
42:98:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:33:00 2025 by rpki-client