Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: mhE1hEj0IE9ka0na2rZE4x3QQdCWg5Z8mYk9tl71238=
Subject key identifier: 88:51:BD:B5:19:4D:6E:BF:4C:53:FD:DF:23:BF:A9:64:F0:15:DC:F7
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0198304C2CB67488F0FB1E13D3E90229B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0C99
Signing time: Tue 22 Jul 2025 04:02:35 +0000
Manifest this update: Tue 22 Jul 2025 04:02:35 +0000
Manifest next update: Wed 23 Jul 2025 04:02:35 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: OxjNYqqSG6mDKvijKKPyqdtyjWbLQDuKcwhVtfzy3A0=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:4c:2c:b6:74:88:f0:fb:1e:13:d3:e9:02:29:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 22 04:02:35 2025 GMT
Not After : Jul 23 04:02:35 2025 GMT
Subject: CN=8851bdb5194d6ebf4c53fddf23bfa964f015dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:3c:6f:e9:9d:c6:ba:04:5a:52:b2:3e:9a:
2d:3a:c6:3e:95:03:65:89:5f:3d:c3:c4:1c:09:28:
0f:fe:55:87:c0:95:64:4d:b6:8e:fa:bc:b0:d7:8a:
77:cf:f9:44:1c:6d:81:c3:02:13:7f:53:17:b3:c5:
e7:36:8c:7e:75:18:fc:83:58:fb:70:6c:1e:46:14:
ad:2f:fc:ed:af:1d:d9:a6:38:63:c2:fe:e6:29:b0:
ac:8c:e1:1d:23:59:e8:28:bd:b4:1a:17:a0:5c:92:
5a:29:aa:03:da:61:26:81:23:31:14:d5:bb:4f:a0:
08:c0:cb:56:7e:8a:12:7d:80:01:d9:f3:10:72:70:
ce:1d:86:34:39:9a:9d:3a:22:81:fd:1d:19:b1:72:
38:b0:fd:a3:7e:8d:2e:83:96:96:b3:b4:cb:cf:aa:
a8:e6:65:2a:f3:7a:8a:8b:a1:90:e2:58:f0:27:b6:
44:eb:dd:9e:fc:84:68:42:20:69:7a:e8:da:78:ac:
25:90:ff:bf:d8:d1:e7:e7:a9:e9:b9:91:93:10:51:
a6:8c:c4:24:40:71:85:e0:88:b5:cd:66:ec:24:f0:
0f:34:92:c1:17:ad:0c:68:41:ae:20:33:46:52:55:
0b:ca:5a:4d:ec:03:46:97:7f:be:4e:c0:58:4f:6c:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:BD:B5:19:4D:6E:BF:4C:53:FD:DF:23:BF:A9:64:F0:15:DC:F7
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:68:93:b1:6b:9a:8b:b7:9f:45:60:9f:e7:f0:f9:db:ef:15:
5d:28:8e:46:4d:5e:1e:41:a1:d6:4e:d6:c9:ab:83:6c:40:77:
03:41:f7:fd:5d:00:95:3d:ce:99:35:cd:92:44:1f:58:80:63:
5d:62:f2:f4:79:e4:7f:0b:b0:4b:7c:d6:55:84:a0:a8:9a:5b:
87:3c:c6:82:87:9b:8d:ad:da:f2:84:86:91:d4:9a:b3:d6:aa:
9d:fc:75:a8:c1:75:9e:6f:22:89:c0:3f:0f:af:4d:b2:86:9e:
45:6f:5c:f9:7a:67:89:35:7c:c3:30:64:4a:9b:cb:6d:3f:a3:
ea:ac:f3:11:e1:36:83:91:93:96:de:89:a0:53:3b:f0:7e:53:
3f:28:9e:a4:6c:76:db:f3:a8:9e:a1:ab:3e:fb:d9:33:e3:d9:
a0:f2:3a:56:d2:0f:d5:82:33:e9:6c:b1:2b:c4:1e:ed:a4:68:
e7:14:87:fc:fe:cc:4c:b4:6d:50:ed:6a:95:c2:64:a8:b0:bf:
63:5a:16:36:92:b4:3e:70:cb:24:46:73:f2:a1:bd:c6:46:a2:
eb:d7:bc:b8:e0:bf:ab:1e:12:0d:bf:e4:c8:1c:46:a1:bc:e6:
9b:36:59:29:8e:1f:23:8b:17:bf:ef:0c:04:75:cc:fd:8a:63:
5f:2b:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:56 2025 by rpki-client