Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: zJw5JKvhWk//TKgfqeSh547xQRgfbYNTKYfF6hTukKM=
Subject key identifier: 8A:0C:33:1B:5D:A5:A1:DE:E9:99:80:1C:F7:C3:DB:2C:BD:AF:F3:03
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01985268435E2467FC3E8E0FF758018A0912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 19:00:21 +0000
Manifest this update: Mon 28 Jul 2025 19:00:21 +0000
Manifest next update: Tue 29 Jul 2025 19:00:21 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: iMHKFRjtUocSTCjrSl6TQY0kISe2wznzvJA5lduvMis=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:43:5e:24:67:fc:3e:8e:0f:f7:58:01:8a:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jul 28 19:00:21 2025 GMT
Not After : Jul 29 19:00:21 2025 GMT
Subject: CN=8a0c331b5da5a1dee999801cf7c3db2cbdaff303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:b4:e0:c8:3b:3d:f1:7d:f3:71:dc:6d:48:
c7:96:ac:52:67:22:07:d9:93:4f:54:51:79:da:c2:
0e:e3:17:51:f7:44:53:0f:1f:2a:59:6d:21:b2:32:
2f:7d:5c:7c:e0:d4:58:68:53:05:48:cf:64:36:b9:
f6:74:f3:22:cc:1d:8f:39:fe:05:03:3e:53:84:19:
da:b9:cf:45:8b:33:61:92:98:3a:38:ac:02:c4:15:
28:1f:fc:9b:c8:5b:e0:99:f1:6a:d4:f7:b2:08:3f:
27:9d:1a:ac:28:26:0d:72:64:38:22:84:77:9f:31:
db:ea:fb:21:9c:6c:ec:fd:90:c9:79:a8:e7:02:78:
ad:9f:e7:6d:a7:0b:0e:f8:4b:c7:34:85:fd:a9:8e:
67:70:44:8a:2d:78:41:c1:ee:2d:15:2e:be:ca:65:
61:91:97:f5:2f:e4:30:da:9f:b4:5f:e1:53:b2:58:
6f:e3:85:c8:8e:c2:d9:ef:4d:a4:5d:cf:61:a1:2f:
71:83:5e:8d:a8:5d:a8:33:7e:c3:ca:c0:8a:f5:84:
9f:44:b5:bb:da:b8:2f:5b:3e:9f:74:7b:83:9a:09:
c0:eb:ba:7b:3f:f4:8e:69:a4:09:25:95:04:a5:53:
d8:06:9d:00:c2:9f:50:21:62:e1:09:5d:c5:5e:4d:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0C:33:1B:5D:A5:A1:DE:E9:99:80:1C:F7:C3:DB:2C:BD:AF:F3:03
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:84:61:d6:2f:5b:1b:5c:3c:c8:c4:9e:91:9a:f8:6b:9e:
f0:97:ff:f3:fd:f8:36:45:81:31:94:90:20:ea:c3:e5:9a:57:
60:15:46:67:8e:3b:c2:c1:20:b6:52:f5:7c:49:f1:6b:fe:b9:
3c:f5:32:88:48:27:25:51:32:20:f8:aa:92:f5:7d:93:59:82:
08:1a:38:11:0c:ff:cd:44:fb:68:ce:1e:bb:80:2c:fc:65:aa:
f6:64:30:c5:a4:60:c0:d8:bd:ea:bf:93:ee:57:7e:80:6b:fb:
c7:79:0e:d4:eb:e9:2b:8b:a5:58:b3:28:1b:d8:81:a7:77:69:
de:a1:1a:31:16:5d:b4:25:bb:c5:71:b3:2f:7a:fe:b4:47:0c:
39:a4:7e:d9:7d:63:2b:3e:88:3e:50:51:3a:c2:2f:56:0f:c1:
89:ad:46:07:78:4a:fa:bc:a3:9c:28:bf:2d:6b:41:62:d8:cf:
3b:26:4f:d4:f5:78:41:e6:c0:54:24:78:dc:54:ea:66:78:6b:
85:3e:72:04:b5:7f:a3:e1:3b:9b:d1:83:fd:93:a2:4b:a1:9a:
d7:42:0a:0a:71:51:ab:cf:19:58:c0:70:98:09:b0:ed:78:b2:
f8:89:80:4e:8d:4d:bf:c5:7e:61:e6:d3:48:20:05:3a:11:09:
15:d4:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:18:44 2025 by rpki-client