Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: ghminKuz2SeTni76HqmcwoP2vhn/iLA68p2pSQOmKic=
Subject key identifier: D4:9F:3F:05:78:CC:E3:0E:F9:65:91:75:AE:AE:4C:7C:94:BA:DB:B5
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 01974D0D7FE0A0E703AED7ACE940A0EBAEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 0793
Signing time: Sun 08 Jun 2025 01:00:19 +0000
Manifest this update: Sun 08 Jun 2025 01:00:19 +0000
Manifest next update: Mon 09 Jun 2025 01:00:19 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: cj/pk//6yHc3uSjBXoxq4xjJhSDkdAaD8VhWiwSPkNo=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:7f:e0:a0:e7:03:ae:d7:ac:e9:40:a0:eb:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Jun 8 01:00:19 2025 GMT
Not After : Jun 9 01:00:19 2025 GMT
Subject: CN=d49f3f0578cce30ef9659175aeae4c7c94badbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:84:cc:18:16:da:e6:89:37:5b:88:c1:f7:
70:cb:d6:31:a5:f5:e8:99:d9:96:64:2d:8e:bd:10:
6b:86:e7:f3:20:cb:d2:da:c9:09:d5:ea:ec:12:ed:
61:eb:76:6c:8c:3b:28:3c:9e:7a:a2:1f:e4:c1:90:
c7:de:98:69:04:a4:f5:03:70:01:f0:14:f6:8f:18:
f1:56:2a:71:5a:b5:d6:a1:2f:f1:02:76:32:0b:11:
97:55:2f:96:be:f4:cf:80:d8:99:3c:ae:6c:5c:a4:
3f:5e:6e:ed:33:b1:f3:53:ce:82:b2:39:c7:a4:72:
e2:2a:e0:95:07:23:5d:1f:a5:16:fa:6f:c4:16:e7:
00:18:37:4d:d0:0e:44:7b:4d:0c:be:ba:6f:1b:86:
9d:52:e3:33:35:a6:61:3b:a6:c7:5a:6d:b4:c2:3d:
fe:01:03:18:32:29:11:0f:35:ee:16:b7:a2:57:c1:
ba:18:db:03:8e:95:24:9c:24:42:df:60:4b:37:dc:
75:38:b4:53:77:8b:39:08:28:e9:e5:73:0b:6c:21:
a3:f4:d3:79:da:af:27:d5:1f:a9:67:5b:04:d0:85:
f3:19:88:14:b6:46:d6:30:62:32:9e:b4:9a:32:69:
37:98:52:c6:b6:52:9f:69:67:86:72:5d:2c:24:e9:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:3F:05:78:CC:E3:0E:F9:65:91:75:AE:AE:4C:7C:94:BA:DB:B5
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d3:06:2a:3c:3d:35:37:08:d3:e2:5c:44:a7:08:7b:1b:96:
78:03:c7:81:60:c0:ae:7d:b3:38:84:90:3b:0b:69:b4:2c:e7:
23:0a:ec:19:45:65:35:bf:cd:2b:8d:7a:62:b5:fd:7c:b2:2d:
e3:3a:e3:ba:9c:41:86:ab:b5:42:d8:1b:05:5e:51:ce:82:2b:
53:a4:92:cd:ee:f5:5f:21:bf:7f:60:0d:50:f2:42:a6:a6:b1:
65:d7:37:df:e8:cf:98:ff:ad:b5:e5:6f:2d:56:85:33:10:78:
59:65:82:6e:34:93:03:e6:cf:00:56:1f:0d:7c:27:80:29:61:
31:21:4a:15:88:b1:7d:ac:58:59:c1:a1:4a:79:c7:cc:f6:8b:
38:96:1c:56:77:4e:6a:1a:f1:14:5a:3e:d7:cb:2c:64:18:9b:
1a:fa:43:16:fb:af:b8:b3:9a:af:b7:cf:8b:55:49:b9:db:14:
cf:25:d4:4d:37:44:46:54:0a:bd:55:3f:7b:56:e6:a4:d0:b8:
d7:33:6f:85:9a:4c:82:56:96:a6:70:4e:3a:63:8f:47:4e:55:
cc:86:48:2e:19:df:5b:93:28:bb:0b:d8:33:13:69:01:41:86:
56:16:0d:2c:2f:31:f1:0f:89:63:be:ca:80:ec:c2:78:5a:8b:
40:e3:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:23:42 2025 by rpki-client