Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: aaHnoYr+tY5eVUIApFcFenCGMw4oj2F4nFxSF41oe74=
Subject key identifier: 65:E0:93:C6:1A:48:4F:22:0C:38:90:19:29:3C:6D:72:D1:D1:E6:43
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019839F33ADFCA376FD57591FA11094C86F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0C9E
Signing time: Thu 24 Jul 2025 01:01:38 +0000
Manifest this update: Thu 24 Jul 2025 01:01:38 +0000
Manifest next update: Fri 25 Jul 2025 01:01:38 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: Qf0s5kiMj6B2KTMuK+CCSawInIdtboGtp/dOcUXZu/s=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f3:3a:df:ca:37:6f:d5:75:91:fa:11:09:4c:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 24 01:01:38 2025 GMT
Not After : Jul 25 01:01:38 2025 GMT
Subject: CN=65e093c61a484f220c389019293c6d72d1d1e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:d1:63:e7:8e:12:34:6f:fa:1d:70:60:6c:
d6:03:06:1a:91:82:0e:f4:4c:5a:67:55:cc:6f:b9:
c3:cd:ca:63:f5:21:6c:a2:cb:9f:2d:a5:cd:f3:58:
67:9a:5f:7f:9d:9d:1c:48:df:b2:58:e8:a2:c6:d3:
8e:d6:bb:7b:b2:19:de:42:33:a4:db:d0:4e:f6:68:
dd:14:75:aa:ce:dc:64:56:38:76:ae:f9:2b:35:0e:
2f:ef:e7:9b:03:8e:bc:96:bc:ea:51:86:b4:35:e1:
f4:70:b6:7e:70:0e:a4:c2:d0:51:ea:fd:ab:06:e2:
53:97:4d:7e:4d:bd:b3:e5:41:68:94:07:5f:11:38:
91:70:5d:d8:f5:95:18:a0:1a:83:e7:2f:75:3a:c1:
f4:1f:48:57:4d:16:2a:eb:6b:f1:77:f9:41:93:0f:
cb:e3:dc:32:0a:43:a6:39:0b:cf:43:13:ae:cd:b6:
f9:13:25:08:9a:86:18:4c:2b:77:7b:4b:ce:61:f8:
f9:1e:5b:16:79:69:5c:5b:a0:01:b6:7b:ff:83:eb:
17:27:62:32:f7:9d:93:f5:5d:88:c8:32:8b:a2:2e:
9f:a9:23:83:b5:02:54:94:84:68:44:04:5f:58:2c:
71:00:dd:10:e3:cb:44:52:ec:a2:19:47:c3:9d:ce:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:93:C6:1A:48:4F:22:0C:38:90:19:29:3C:6D:72:D1:D1:E6:43
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:de:93:5a:da:d0:95:a9:2e:ff:fb:d3:83:94:c5:0e:f8:cd:
10:91:af:ac:9e:17:a1:c2:80:5a:57:c4:48:67:ef:fc:d4:0c:
f8:16:22:84:65:f8:ce:59:68:38:cc:2a:f8:07:e9:6e:d2:f5:
56:fa:64:67:96:21:0e:23:cb:d9:0a:0a:26:60:37:49:a2:d4:
1e:c8:d0:22:41:1d:d8:2a:5d:c8:bf:3b:42:51:0f:6a:b8:2b:
c6:12:93:29:e8:62:ad:5b:aa:c1:65:b0:99:cc:6d:58:c9:1b:
c0:65:19:51:50:00:d3:ca:04:aa:25:9e:f0:09:b0:43:86:d2:
44:e5:c2:f6:ac:a0:38:2c:a8:8e:4d:99:e7:9f:3b:fc:11:93:
1a:e4:17:db:6a:27:12:f7:b4:20:5e:4f:e0:31:aa:bb:5d:c1:
74:c9:f4:c4:01:e8:7c:a4:ce:8f:02:d9:f2:50:3e:49:2f:16:
b6:79:e2:14:ca:5d:78:84:d5:42:5c:f2:e6:b0:c3:b7:85:76:
1c:2a:47:3a:fd:f9:62:32:77:6b:5a:6f:62:43:1f:d4:72:c6:
cd:42:a5:66:3b:64:ff:2c:11:66:ea:d3:02:80:72:30:5e:4a:
1d:95:dc:38:ea:83:b4:63:2f:30:7f:71:ce:9b:42:9a:d7:7a:
53:b9:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:51 2025 by rpki-client