Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: zlxZ3Lqp8l2AEWaZGZi8nYqZegZF39DYH8XlhlHuCj4=
Subject key identifier: 7E:E6:42:74:FB:F8:81:94:9C:A9:6D:6C:7C:DF:C5:E2:B3:80:C2:DA
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019853E8E8B860E1C35449B0DB9782F1C764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0569
Signing time: Tue 29 Jul 2025 02:00:29 +0000
Manifest this update: Tue 29 Jul 2025 02:00:29 +0000
Manifest next update: Wed 30 Jul 2025 02:00:29 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: vmQIbYGzIBq82nLX15aZCWgDZJN/DYHxNyAJZSqVAuo=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:e8:b8:60:e1:c3:54:49:b0:db:97:82:f1:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jul 29 02:00:29 2025 GMT
Not After : Jul 30 02:00:29 2025 GMT
Subject: CN=7ee64274fbf881949ca96d6c7cdfc5e2b380c2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:20:f8:86:5b:2c:20:fe:4e:9a:40:ee:f9:
b8:ec:0e:05:57:1c:a8:d5:b3:01:2e:44:0b:f9:40:
1e:df:f1:44:6f:60:b4:37:62:da:6a:75:ea:8f:46:
38:a1:2a:2d:70:50:c6:32:0d:e1:88:a8:0a:93:24:
7a:e6:f2:7e:5a:af:04:dc:9a:82:b7:eb:06:37:6d:
b1:ef:44:e4:15:0f:28:30:08:8f:0d:38:d5:2d:31:
9a:05:7f:a0:a2:5f:f1:8e:8c:08:29:9c:5e:b2:e6:
60:0d:02:4a:11:5a:a3:9c:dd:37:da:a7:a8:33:57:
9a:a7:ee:64:34:5f:7b:4b:40:90:b7:e6:9e:3f:b5:
3e:af:36:f9:ce:bc:ba:52:85:de:ea:f3:bb:69:32:
dc:9c:4a:99:47:b3:16:13:a2:f6:44:62:95:08:e0:
05:7b:ae:09:1d:2b:97:12:a9:43:d0:7a:11:88:3a:
be:fe:9a:aa:56:dc:e3:a3:28:34:47:1b:ac:2c:3c:
5e:54:09:eb:cd:cf:79:c2:35:2c:61:af:70:e3:99:
ee:4e:ae:c3:2d:93:48:57:2c:70:0e:8b:a4:ed:dd:
75:07:92:83:3a:8c:17:60:17:95:e0:bc:bc:5f:b3:
20:26:55:54:ef:33:89:55:5c:71:dd:99:cc:b7:f5:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:42:74:FB:F8:81:94:9C:A9:6D:6C:7C:DF:C5:E2:B3:80:C2:DA
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:63:6e:36:17:d5:29:9e:9e:73:75:ad:99:96:2c:95:78:51:
56:58:b8:b0:7b:f4:79:54:4f:3b:d7:28:0f:95:e0:fe:74:fc:
af:68:95:37:18:f9:4a:69:e5:01:24:ab:20:d5:37:85:21:9b:
9f:74:05:0b:f0:80:19:ab:a1:51:82:24:43:d4:8e:0e:e9:66:
85:9a:7c:d1:5c:ba:62:45:cd:ac:21:0f:40:80:0d:e0:06:08:
57:2e:57:f9:75:9c:7f:60:21:75:fe:29:fd:50:2d:27:82:98:
4d:c8:16:18:06:76:83:65:e9:44:ef:1f:9d:82:f8:f6:86:97:
b1:5a:cc:f0:28:af:93:c6:f5:0d:02:15:29:e4:9c:c4:c2:2d:
4c:75:14:54:3f:ed:67:df:a1:b4:83:c1:85:03:cf:05:94:cd:
c2:68:1e:3e:22:8a:08:85:90:0f:fd:38:a7:ba:cb:f2:6b:ae:
31:27:4e:fa:d2:35:de:77:64:7a:56:e4:9b:0a:93:41:8b:f2:
1e:e1:20:e1:ad:74:27:3b:2e:af:0a:7f:15:30:01:bf:79:0c:
b8:d7:65:b7:b6:28:66:9c:98:e9:ad:52:c0:32:a9:13:ce:e5:
54:88:de:8b:a2:fc:bf:29:a1:7f:e0:ae:95:78:d5:c4:1e:d8:
51:a3:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:51:07 2025 by rpki-client