Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: xGcVlq63F9Zq8dZwwYQJF6HR+3XSB98CJHd/KxhyjsA=
Subject key identifier: A2:DE:28:15:EB:B3:0C:5A:56:EB:D9:57:EE:5F:36:13:A6:59:95:30
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 01984A77E425AA6FD62E81AEDB9EB35FD8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0DC7
Signing time: Sun 27 Jul 2025 06:00:27 +0000
Manifest this update: Sun 27 Jul 2025 06:00:27 +0000
Manifest next update: Mon 28 Jul 2025 06:00:27 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: B0H/zA/Fs7FPPz+TDTQWAvaBYKlvxjyQ4+hYcLaneik=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:e4:25:aa:6f:d6:2e:81:ae:db:9e:b3:5f:d8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jul 27 06:00:27 2025 GMT
Not After : Jul 28 06:00:27 2025 GMT
Subject: CN=a2de2815ebb30c5a56ebd957ee5f3613a6599530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:49:4a:f1:8c:64:35:ab:22:ed:f8:36:86:
54:ff:41:5b:bd:aa:1b:d9:9f:11:4f:5b:11:3a:12:
47:de:4f:bd:16:13:09:f7:4e:db:b1:2a:18:93:05:
48:aa:20:ce:6a:0b:dd:21:22:ce:38:0c:33:e6:44:
20:3e:59:4a:83:3e:bd:be:0e:db:8e:93:f5:fb:c5:
69:37:c2:1c:ad:a7:fa:b6:67:cb:96:fd:28:7a:34:
45:8e:d6:ee:6f:8e:14:d1:56:f4:4e:7d:df:07:5d:
8d:b7:55:dd:98:70:f4:3a:32:8b:f1:cb:3a:4c:94:
e6:c2:50:06:4a:cb:f5:ce:a9:4a:da:c9:54:d7:8d:
2a:16:62:e4:f6:08:63:07:5e:4a:f5:73:72:0c:a8:
f5:8e:61:1c:28:e0:06:b2:cd:c8:ae:c2:a1:52:dd:
76:49:e0:58:cd:04:fb:a8:95:68:af:65:e9:a0:1c:
f1:1e:08:3f:dc:97:eb:23:57:b2:67:d9:06:bc:dd:
ad:b6:30:68:da:2e:ae:9f:af:d8:06:d4:cd:1b:82:
1e:a8:fd:f8:dc:bc:9d:5c:27:fe:df:16:64:aa:48:
62:d4:67:3c:db:72:91:2f:7e:09:66:c4:29:f6:e4:
ac:20:2f:5a:42:a4:10:17:dd:d5:9a:c2:a0:0c:2c:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:28:15:EB:B3:0C:5A:56:EB:D9:57:EE:5F:36:13:A6:59:95:30
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:5d:db:3b:25:00:51:f9:f0:ae:09:9b:84:da:ae:72:e0:
c1:c4:2e:22:26:31:a7:d7:dd:c9:2c:19:65:25:f6:cb:c1:66:
e8:2a:f1:db:08:5e:c1:ab:1e:c1:6a:89:78:11:e8:4a:97:e8:
50:e0:e2:3e:02:9c:59:b8:3e:fd:2e:3c:ed:8f:28:37:62:77:
3d:0b:5d:c9:6e:08:ce:22:74:66:00:73:4e:91:41:02:18:c7:
10:be:41:f9:f3:78:96:b1:96:43:79:b7:33:6f:8d:e5:8b:49:
85:06:5f:1c:82:92:66:e6:a4:17:f7:cb:93:65:ec:68:ea:18:
a0:5d:43:a8:ae:09:05:5e:2c:a0:e1:cd:3b:24:d3:ab:68:4a:
91:e9:4b:2e:2b:17:b1:35:63:58:72:b8:cc:a7:cc:fb:fd:57:
db:86:64:6f:96:d1:ea:79:a1:94:d5:a9:2f:fa:35:9f:0f:5d:
cf:a2:58:49:99:54:18:e1:66:cb:da:0f:97:63:f7:93:b9:5b:
f7:1e:5a:8e:1e:ae:d8:08:3a:d5:92:f1:7a:1d:32:d8:4a:a1:
0c:bf:f3:21:e5:b4:70:12:0a:2e:56:b4:80:2e:93:15:e8:00:
1c:13:10:51:f3:90:c6:69:f2:65:19:4f:0a:7a:f4:54:42:d6:
af:76:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:51 2025 by rpki-client