Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: dlcmfObrooxfR8onxgXG3iX6y/rFi7FWzIKSmlZtgKU=
Subject key identifier: BB:F4:58:10:96:67:0C:91:EF:E0:AE:9E:C5:6F:DD:30:D0:56:96:BE
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0198481BB5E21248DDAC5675BA10E7712419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1610
Signing time: Sat 26 Jul 2025 19:00:32 +0000
Manifest this update: Sat 26 Jul 2025 19:00:32 +0000
Manifest next update: Sun 27 Jul 2025 19:00:32 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: v50Qzk3KRvlXFG3j5u4waG265Uiv8jcI57uOoR8WBOc=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b5:e2:12:48:dd:ac:56:75:ba:10:e7:71:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jul 26 19:00:32 2025 GMT
Not After : Jul 27 19:00:32 2025 GMT
Subject: CN=bbf4581096670c91efe0ae9ec56fdd30d05696be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:70:8f:35:dc:16:34:b1:b3:a5:5c:04:6b:
f2:91:85:70:35:de:71:95:2a:2c:15:21:d2:cd:cb:
e8:f7:77:1c:97:a1:70:c1:f3:c8:5a:2d:67:7e:3d:
44:fc:5d:5a:5e:98:42:27:92:f6:7d:56:b7:93:3b:
37:d6:5c:2f:e5:c0:38:6b:9c:db:9f:cd:af:94:26:
44:a3:f5:be:18:5b:07:2e:7a:04:58:c1:9e:1b:2f:
60:42:3e:c8:40:95:2e:ae:95:6d:18:89:de:a0:88:
9a:a8:e4:23:00:bd:c6:3c:7b:f1:df:c4:a0:f9:84:
e7:30:51:4b:92:59:b8:50:29:bf:6c:21:66:53:e2:
fa:d9:fd:ca:d5:01:53:d1:87:40:fd:bc:03:fe:d1:
6d:be:80:43:5f:31:56:a3:43:7f:8e:60:6b:7e:02:
f0:4a:36:a0:24:7f:45:44:f7:22:a4:0a:b6:25:bf:
d4:ab:66:a8:a0:67:5e:83:35:65:64:0b:aa:db:a4:
43:c8:bb:c6:79:81:5c:a6:cb:48:5e:a2:00:72:a5:
71:0f:28:4b:7b:ba:cb:49:e7:d0:56:08:f4:ed:6e:
54:d1:f4:37:55:36:8c:b1:54:b8:98:e2:a7:58:42:
bb:29:9f:29:af:bc:58:66:3d:25:df:ca:32:d9:9f:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:58:10:96:67:0C:91:EF:E0:AE:9E:C5:6F:DD:30:D0:56:96:BE
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:4f:6c:24:7d:ef:0d:12:15:c8:1f:91:4c:72:cb:3f:f1:
6b:78:11:78:a8:e3:1f:57:80:4a:bc:ed:b7:5e:a7:c5:59:6f:
da:9c:3c:15:2e:7a:c5:60:5c:33:2a:72:97:a1:4f:67:76:58:
ff:ec:ae:70:d6:b7:6b:19:8b:98:e0:19:5b:f5:a5:bf:b7:d2:
82:1a:4c:0a:ee:8c:6d:76:8b:0a:bf:84:0a:d5:1c:3f:43:f4:
8b:fa:40:2e:15:d9:5b:22:d3:84:6e:77:5b:3c:77:be:42:6e:
3e:5f:08:b0:05:da:83:70:06:f6:8a:d3:a7:03:3e:c0:88:dd:
3a:79:b7:3e:78:43:df:04:05:45:51:ed:71:b7:67:ab:ed:77:
af:ac:58:e4:1c:ad:1d:09:79:57:92:86:85:53:7a:ce:de:db:
73:62:f8:f1:95:2f:f3:f8:5a:eb:cb:2e:75:a9:da:fc:40:2c:
78:ec:8d:89:36:c2:95:6a:59:4f:ef:45:12:b0:be:84:37:84:
b1:fd:44:b5:35:d5:0d:f3:09:e5:b7:3f:5d:75:6b:52:10:3d:
6e:1d:f1:0c:5a:ef:c1:1a:a8:af:1d:07:e3:a3:e3:f7:56:df:
a0:eb:2d:fd:68:7b:51:7e:c1:07:19:2b:d4:f7:81:8d:39:0f:
e4:b5:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:12:21 2025 by rpki-client