Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: Itmk4xkTQw7v7W0/dlPlDu0XOirS6Q6yKdka171DdRQ=
Subject key identifier: 13:E0:DA:7C:3D:5C:78:7B:87:69:C9:D7:54:55:6D:02:29:00:88:55
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0198439ABAF37FA0E1AF6F726CC580A7721D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0CA3
Signing time: Fri 25 Jul 2025 22:01:10 +0000
Manifest this update: Fri 25 Jul 2025 22:01:10 +0000
Manifest next update: Sat 26 Jul 2025 22:01:10 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: HJH/GqhU2oIgpIKn7ZjBHtaDHLznQc5cwveQcNzG3xU=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:ba:f3:7f:a0:e1:af:6f:72:6c:c5:80:a7:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 25 22:01:10 2025 GMT
Not After : Jul 26 22:01:10 2025 GMT
Subject: CN=13e0da7c3d5c787b8769c9d754556d0229008855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:87:b1:a5:3d:89:fd:55:ce:9f:fd:18:34:
2f:01:28:e6:cf:21:b1:2c:de:d5:1e:fe:5a:bf:73:
bc:c1:94:b6:3c:60:dc:d3:5e:cb:8e:85:bb:64:a0:
fe:2a:9e:38:9a:31:65:3d:21:ec:6b:c2:cf:8b:54:
a6:78:ab:10:d0:82:8c:a9:56:e3:b4:55:e6:9f:ea:
96:e9:53:dc:98:28:8d:ac:5f:bf:fd:a0:ef:80:f7:
88:71:0b:f7:3e:f0:3e:1f:1b:56:bc:5c:f8:f1:b9:
fe:90:26:58:5d:5a:b3:40:6e:12:9f:f2:f4:04:cc:
a8:d2:80:65:c6:5b:79:f7:a9:55:51:85:68:69:d7:
58:f0:94:93:0b:ac:0e:14:6b:9f:7b:8c:b9:65:ca:
ee:9c:7a:70:76:58:0b:db:92:8e:47:3a:69:d6:26:
8d:77:15:67:3c:42:3f:12:33:9e:f5:28:df:db:37:
0f:0e:72:ee:ab:fc:01:09:f3:d6:08:15:ef:ff:8b:
49:21:0d:09:5c:1c:9f:a0:3d:f8:51:19:93:cf:a7:
5e:54:a5:8f:3b:2e:f1:96:24:1d:fc:04:2b:5a:f9:
ac:87:a3:e3:dd:ce:14:f3:57:27:66:de:8b:74:c8:
34:81:85:fb:64:21:7a:34:cc:b7:ea:d5:92:63:c1:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:DA:7C:3D:5C:78:7B:87:69:C9:D7:54:55:6D:02:29:00:88:55
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:05:09:03:d2:11:b3:23:4c:a6:37:16:b2:ae:f2:08:6d:f0:
1d:15:63:7b:76:b8:04:94:b1:a6:86:38:c5:e9:6b:f7:de:91:
9a:27:08:df:26:ab:d6:4d:af:04:53:de:c3:44:33:0a:24:07:
38:d4:e5:54:1f:24:44:4e:be:d2:11:a5:f6:f0:62:83:c1:88:
eb:59:14:17:04:dc:35:f5:e0:6c:00:a2:a2:3b:0d:2c:40:ca:
cd:68:cd:80:46:dd:f0:5f:ec:31:1d:02:60:b5:8f:f1:5c:d3:
86:3d:aa:c0:b8:d3:f5:78:53:48:02:55:88:e1:1c:48:d3:2f:
4a:cd:72:63:65:96:75:fc:ef:43:c9:27:bd:72:42:c3:c0:d1:
e0:f0:54:5e:89:74:ff:e6:00:b3:eb:a1:79:bf:30:23:bd:e3:
13:ab:8e:fe:dd:1c:f9:59:4f:d4:7a:c1:08:e1:7a:fd:b9:85:
4d:4d:11:2b:ed:24:f1:7d:c6:47:83:7d:a9:e4:cb:40:10:94:
17:d8:50:18:d3:29:f0:3a:96:b7:e3:ba:e0:31:6c:8d:ce:70:
8a:ba:ff:b4:eb:b3:96:98:31:b4:d5:11:08:63:6a:8e:6e:f4:
ed:38:88:d9:39:3c:14:0c:c5:c0:f5:92:03:b2:ae:b9:00:db:
f3:55:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:36 2025 by rpki-client