Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: o38uL4nSVh7NoEhJBcKbpiOObUk6dZYw9eT8k7dNrWA=
Subject key identifier: 1F:63:C1:E1:0C:7D:33:66:A9:17:C2:20:61:34:DA:81:AA:C3:C8:59
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 019854FB5DDCF773044BFA345B220D1BC21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 07:00:16 +0000
Manifest this update: Tue 29 Jul 2025 07:00:16 +0000
Manifest next update: Wed 30 Jul 2025 07:00:16 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: rIESt8syMb4RjXlx8zd4YX2Nsx1yadXitLyCmhz/SF0=)
2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:5d:dc:f7:73:04:4b:fa:34:5b:22:0d:1b:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Jul 29 07:00:16 2025 GMT
Not After : Jul 30 07:00:16 2025 GMT
Subject: CN=1f63c1e10c7d3366a917c2206134da81aac3c859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:bd:49:1d:16:00:88:99:16:3e:01:7d:cf:
87:56:f6:95:07:b8:bd:db:50:a7:45:47:24:4e:80:
d1:3b:ce:e2:38:79:61:d2:9d:ac:2f:5a:b0:49:87:
c0:4b:fd:07:fa:70:ed:ec:15:f1:f3:7a:08:01:89:
c1:33:eb:62:95:79:dd:b6:cd:38:cc:92:c3:9d:37:
77:8a:d3:73:5c:9e:b1:e7:0f:92:2e:91:09:06:df:
7c:f1:bd:3c:92:6c:34:b7:05:f9:cd:72:35:d1:4e:
f7:fe:9a:51:0a:26:48:3d:ca:36:7c:4f:30:df:85:
8e:1f:df:92:75:0f:2a:54:57:dd:7f:5b:d6:b9:47:
8d:ce:2e:a5:d4:ed:f9:32:5b:67:0a:66:2c:79:03:
a1:15:48:da:50:80:0d:bc:1e:17:40:af:4a:e4:4f:
2c:d6:9a:04:b6:1b:dd:04:78:47:d4:7a:23:6c:05:
1f:64:4e:2b:0a:55:79:7a:77:56:23:15:48:10:0c:
70:ae:5b:ff:28:ea:b9:09:d8:1d:41:9b:58:bf:80:
75:21:cf:0d:5d:56:aa:bf:5c:2c:70:49:03:6a:15:
00:fb:ef:6a:4b:d3:4b:d2:ac:80:61:59:59:2c:d2:
0c:ef:df:63:f8:6a:e4:c9:e3:81:c0:e6:93:55:b5:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:C1:E1:0C:7D:33:66:A9:17:C2:20:61:34:DA:81:AA:C3:C8:59
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:c3:c3:56:e9:75:05:92:e1:d7:bb:11:38:e7:ba:b7:c2:
aa:6d:97:bb:cc:9e:38:fa:13:af:12:64:6d:09:98:d3:ad:64:
b7:68:65:2a:bc:ef:9e:09:a9:b5:96:ba:d6:43:4b:9b:18:68:
81:a9:12:be:1b:d4:56:e6:c7:c0:ae:3d:4c:fe:85:84:38:85:
87:3d:e7:ad:ba:8c:3e:32:75:8c:81:19:c4:cc:40:79:c1:75:
c6:15:e2:a6:8d:27:e1:08:48:5a:a9:75:82:85:79:cf:20:ed:
a4:5f:47:e5:e0:72:51:f4:49:b3:27:b5:00:d5:11:73:2a:6c:
d1:11:e7:26:5e:2e:c7:9b:ca:c8:95:32:a7:42:69:db:4c:c6:
99:5d:a9:2b:75:e9:00:ae:3d:9f:77:03:9c:a3:27:2a:df:55:
95:ad:40:44:19:e4:1b:00:d1:70:02:85:4d:21:9e:50:c2:63:
24:cb:78:ea:82:a3:e0:a8:34:b3:2d:23:87:54:66:b3:a8:11:
05:f4:da:4f:c0:96:09:19:c2:3b:7a:41:05:6e:11:6f:3d:8c:
c2:82:47:2c:84:61:89:6a:34:0f:90:d7:fa:7e:91:1e:6d:91:
c2:94:0b:0c:04:b4:5a:6c:e1:37:56:43:8b:fc:90:eb:cb:65:
3e:e7:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:14 2025 by rpki-client