Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: bGo+Fbq+ZFYp31P3IchcVu+8XXL+PMg5KBP8uDMQ57M=
Subject key identifier: 09:16:D8:29:85:F6:D8:F1:27:FA:EA:A2:C5:63:A8:CD:AD:68:45:EA
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01982711000C5C7E4BCE186A80A52C7210E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 1056
Signing time: Sun 20 Jul 2025 09:01:22 +0000
Manifest this update: Sun 20 Jul 2025 09:01:22 +0000
Manifest next update: Mon 21 Jul 2025 09:01:22 +0000
Files and hashes: 1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=)
2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=)
3: AF6uSBXXjV8m6D8T1L1tDnPI1pQ.roa (hash: 5ngifaMxS9mhHVtoSr7d4Aq0k4gtgdDqeUt6H7Q6K9U=)
4: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (hash: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=)
5: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: PfMFspm11IoPemdHP8ZkWfbsOnW/6/PBBCENViPLOhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:11:00:0c:5c:7e:4b:ce:18:6a:80:a5:2c:72:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Jul 20 09:01:22 2025 GMT
Not After : Jul 21 09:01:22 2025 GMT
Subject: CN=0916d82985f6d8f127faeaa2c563a8cdad6845ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:23:20:2c:c4:f3:2e:e5:e6:b0:45:1e:79:
83:21:2b:06:36:71:27:18:a4:9f:e5:5a:02:54:dd:
4c:57:f0:65:57:22:7e:40:42:ed:3d:f4:e1:e7:41:
d0:9f:5a:52:0f:7a:64:10:65:74:5c:4d:d2:45:91:
c4:11:70:3a:65:7f:26:8d:5b:3b:4a:99:48:cc:4a:
45:f6:3c:42:8c:04:b3:79:f7:b0:21:ce:a0:4e:25:
38:10:65:df:77:4f:d1:e1:91:b5:0f:6a:22:d8:5e:
dd:02:aa:1b:db:3c:19:d8:be:7d:bc:b9:ab:60:5f:
bc:70:95:37:a7:58:68:ef:6f:c6:7c:e0:b8:96:1a:
97:28:15:e3:25:b4:c2:17:eb:5c:a0:6b:23:a8:af:
26:c5:51:57:38:3c:99:b5:9b:5c:4c:bd:df:30:c1:
3c:a0:ba:90:40:8f:91:5e:5d:07:d3:e1:6b:e7:f8:
01:db:83:69:05:83:8d:ed:a3:c2:bc:dd:1c:26:5e:
f0:90:bc:c0:6e:29:73:d9:0f:ba:9a:db:59:c7:65:
0c:bb:4b:b5:ab:e1:0c:cf:6c:a1:15:32:f0:fc:24:
4f:fe:ea:71:8d:27:55:af:df:a0:62:3d:af:0c:c2:
21:5a:7c:29:fb:a9:cf:d7:82:f7:e2:1c:21:97:9c:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:D8:29:85:F6:D8:F1:27:FA:EA:A2:C5:63:A8:CD:AD:68:45:EA
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4b:13:8b:7f:a8:2f:8e:dc:15:23:ab:b2:7b:29:42:2c:89:
7a:be:7b:aa:de:a2:57:de:21:ac:f7:9b:61:30:cd:34:35:ed:
d5:d5:68:5c:7d:b0:43:ba:81:16:9d:8c:79:c4:c5:cc:ac:67:
ee:ab:f3:10:c7:05:88:0a:dd:f7:c0:07:af:45:58:14:98:f0:
08:ac:29:fd:f1:2b:53:c4:5e:a2:6c:c7:57:b3:68:2d:37:9c:
73:6d:e7:b6:3d:ac:81:5b:86:92:a7:ba:f5:46:9a:d2:7c:15:
29:49:68:54:22:78:cc:bc:58:da:30:77:e2:8d:f9:82:6f:1d:
4a:77:19:d2:38:a7:e6:d7:ed:fd:b4:82:68:03:d5:45:0a:f8:
c3:af:c4:e6:fd:3e:ff:30:65:62:9e:b9:e4:97:50:4a:6a:db:
55:68:8e:5b:f4:3a:9f:23:a4:1e:80:93:82:d7:29:9b:f1:cf:
c9:c6:dd:94:7e:09:c5:5e:87:89:96:f3:e2:ff:ce:35:cc:10:
e6:e5:9a:bc:fc:40:eb:8b:33:1a:c2:78:90:c3:e2:61:44:dc:
97:ef:b1:03:3f:22:22:65:90:c3:92:c9:25:2f:a5:03:fc:3e:
85:98:eb:3b:8a:5f:03:5a:8f:48:bb:8a:c7:c3:81:95:68:06:
9b:dd:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:26:03 2025 by rpki-client