Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: VI8jCD8hnQ7gU8AgX8wuatfL4JZoeFLda+3LSKhn3PM=
Subject key identifier: EA:7C:61:85:E8:65:C1:06:ED:CF:EA:FA:E0:BC:4F:3F:DD:50:EE:33
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 019844ACE2DCE7F4798D0AB072E2BE8114E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 03:00:37 +0000
Manifest this update: Sat 26 Jul 2025 03:00:37 +0000
Manifest next update: Sun 27 Jul 2025 03:00:37 +0000
Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: kubj8nYA8uUkdC7OsnOJhBB/ti2mHVKoMpVZ1URVZ0s=)
3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:e2:dc:e7:f4:79:8d:0a:b0:72:e2:be:81:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jul 26 03:00:37 2025 GMT
Not After : Jul 27 03:00:37 2025 GMT
Subject: CN=ea7c6185e865c106edcfeafae0bc4f3fdd50ee33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:61:f0:cf:fb:41:85:16:8c:23:e3:cf:6f:
1e:5c:b3:7d:42:4d:df:7a:fc:3f:ff:d1:59:90:da:
f8:3f:1d:a7:91:8c:59:3f:7f:e7:90:75:64:be:14:
4f:1f:22:73:4b:32:53:d4:f1:38:c4:9f:21:1e:1e:
8e:9f:a5:2a:e9:07:f8:33:52:cc:6d:f1:8a:95:7c:
4a:be:77:75:4b:fd:60:c6:d3:aa:5b:03:23:79:d3:
8e:d1:1c:b3:cf:91:e2:92:c9:ec:7f:e9:b2:e4:7a:
1d:7b:4a:82:d4:99:47:76:3b:1d:be:f6:d1:56:c7:
4a:b6:cf:ec:13:03:2c:08:68:8c:25:74:90:c4:da:
ab:0a:fa:f7:f4:3a:6d:b8:60:06:57:fc:1b:ed:09:
ed:87:5d:08:81:ac:62:35:b6:05:1d:4b:d2:b7:ed:
23:90:33:ff:f0:84:4a:26:a9:a9:ba:a2:ee:0c:b6:
df:55:24:1f:45:eb:9c:72:61:c7:dc:82:80:97:06:
44:31:1d:7e:29:8e:9e:31:dd:0c:2f:7b:87:b0:95:
7f:02:98:b3:69:31:67:6f:67:eb:17:2a:d2:e8:2c:
b1:1b:c6:cc:6f:3c:45:61:11:b9:a4:e8:a4:14:ea:
29:02:89:ab:45:8e:2a:1c:0c:67:9a:dd:39:c7:64:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:61:85:E8:65:C1:06:ED:CF:EA:FA:E0:BC:4F:3F:DD:50:EE:33
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:6c:49:df:45:0b:28:15:05:b8:ed:67:11:b3:0e:af:53:
15:4c:8b:64:a5:58:df:85:96:2d:b8:8d:17:09:87:61:e5:11:
ff:d6:db:6b:83:5b:95:51:4f:ad:14:2e:2b:fa:47:55:05:7a:
47:4b:7f:72:25:94:fe:d8:d9:af:0f:52:1a:4f:c7:12:0a:42:
74:ea:c1:35:1f:90:b4:16:c7:ba:eb:56:a0:65:1c:6f:31:31:
76:55:0e:39:e0:9b:0d:9c:d5:3e:ad:f2:67:db:75:8f:33:79:
f2:85:9b:ff:b8:5b:cc:0a:34:ec:45:c4:7b:17:75:9d:87:83:
07:65:98:7a:a6:97:b8:65:9c:9e:87:fb:0a:23:48:cb:e5:5b:
6f:38:d8:14:5d:64:1d:a5:c8:87:54:0e:c3:80:34:80:d9:2d:
10:4d:e8:98:bd:5b:75:b9:c1:d4:f9:7b:b5:f7:d0:ba:b3:38:
48:fe:93:c8:22:a3:e0:82:95:01:fb:13:6f:e4:5d:f5:99:30:
7b:70:cb:2c:27:26:8a:c1:4b:02:9f:4d:4b:2a:c1:8d:02:85:
90:f9:a0:f0:6b:1f:b3:63:06:17:60:b4:cf:5a:56:01:4a:77:
9b:6a:0e:e4:80:5e:05:5b:1a:f2:1b:3a:13:7b:28:c4:aa:e1:
6f:ab:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:26:11 2025 by rpki-client