Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: fladinZfHrLGnCq+IoXHq3L3zPhj3zcVT4NL/ii96fc=
Subject key identifier: 85:B0:1D:14:67:56:FC:6F:D9:69:4A:C5:AB:FC:95:77:97:F5:61:93
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 01974A0CA2AB623ACD3D5B89A61CEBA5B595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0E4D
Signing time: Sat 07 Jun 2025 11:00:31 +0000
Manifest this update: Sat 07 Jun 2025 11:00:31 +0000
Manifest next update: Sun 08 Jun 2025 11:00:31 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: h3p4WFp5hznUTqMp69+8ab3BR4dpo3MGazQB61tcLEY=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a2:ab:62:3a:cd:3d:5b:89:a6:1c:eb:a5:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Jun 7 11:00:31 2025 GMT
Not After : Jun 8 11:00:31 2025 GMT
Subject: CN=85b01d146756fc6fd9694ac5abfc957797f56193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:d1:9f:f1:a6:eb:13:a7:e8:32:7e:e9:16:
ea:a5:44:26:b4:01:43:82:a9:68:2c:0f:15:f0:71:
4f:0b:07:0e:3c:66:61:02:02:c6:b4:39:4b:96:d2:
83:59:97:5e:23:17:13:81:d4:25:bc:a0:b2:95:a5:
0f:92:96:c6:14:28:b0:e6:6f:70:05:76:6d:d6:19:
6a:24:a2:66:65:26:0c:0b:40:fd:03:5b:e6:a2:b4:
dc:d0:8b:ca:d2:9f:51:80:3a:c5:5e:6e:3b:03:77:
1f:5c:7f:60:35:70:85:06:8a:f5:f9:db:c0:b2:12:
04:af:9d:16:25:27:c5:5a:be:61:66:ee:7d:ef:22:
e4:af:44:cb:68:f0:f7:15:4b:83:b9:e4:28:54:98:
24:e3:10:90:2a:a7:d3:28:61:e5:61:37:da:1f:51:
6e:48:6c:b6:fe:1c:03:b3:81:77:83:07:41:3c:06:
e7:45:10:89:f2:0a:42:03:a7:4e:c0:cb:ab:a9:9b:
ba:ba:ed:a9:5f:f6:09:2f:33:1a:be:63:63:ff:12:
0a:96:07:0d:ea:12:9e:db:af:88:27:c2:38:17:dd:
9d:42:c6:e0:32:0e:93:95:30:2b:8c:d7:96:6a:ac:
df:59:de:d1:c6:81:64:23:7e:ee:d3:54:92:95:ee:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:1D:14:67:56:FC:6F:D9:69:4A:C5:AB:FC:95:77:97:F5:61:93
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d3:4a:75:4b:02:29:d8:da:e8:41:97:0d:dd:12:3b:6e:cd:
94:8f:3b:0c:08:9c:c3:7a:08:b0:a2:3f:e5:69:fe:a7:b9:0d:
8d:95:94:0d:82:9d:71:ea:b7:51:71:44:af:0a:58:8d:8a:1e:
a0:67:bb:44:7e:7c:5f:73:1b:0e:80:9c:86:89:b1:6a:03:16:
2f:a9:c7:19:67:ba:71:8c:6a:8b:48:2b:e7:9a:f4:a1:7b:8f:
c2:d5:e6:96:69:0d:ca:7e:5d:d3:5b:69:d9:d7:45:52:67:ea:
7c:22:00:f1:75:10:6a:59:fa:15:f9:f5:be:eb:37:20:0b:a3:
a0:96:f3:32:7b:c3:a5:7b:8e:70:11:20:8b:5b:b8:44:b4:e3:
e3:99:a0:0a:6d:3a:59:04:c6:7a:e8:7d:dd:68:ec:72:32:d2:
11:17:3a:64:c7:39:a0:7e:8f:1f:9f:c2:84:f1:22:3b:b1:36:
db:3e:39:3b:c9:28:fc:33:3a:63:1c:3a:6f:78:00:ea:34:ee:
07:92:86:51:92:14:6a:81:70:56:7a:2a:61:e5:56:6c:27:61:
20:19:c6:f0:c3:25:a4:61:62:fe:43:19:67:e7:5c:ed:de:a9:
6a:6a:bc:3c:1d:59:60:95:b1:2d:5a:a4:82:6f:52:3c:22:5f:
4a:a3:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:55:40 2025 by rpki-client