Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: ZZwGn6GFM2XSUapdzIC1kdKYKl+fVD8y5UwbemIcNaQ=
Subject key identifier: F2:D1:59:46:1E:BB:9A:DB:FB:5E:5F:B4:3E:9B:2C:41:96:1E:16:68
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 01974DEA0D7B5352B5998AF4EB6DF7FDBC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0A0E
Signing time: Sun 08 Jun 2025 05:01:13 +0000
Manifest this update: Sun 08 Jun 2025 05:01:13 +0000
Manifest next update: Mon 09 Jun 2025 05:01:13 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: edHF+7w8HfGOpL1iES5jiVgfg+1/0OMuUzue/QySPNc=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:ea:0d:7b:53:52:b5:99:8a:f4:eb:6d:f7:fd:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jun 8 05:01:13 2025 GMT
Not After : Jun 9 05:01:13 2025 GMT
Subject: CN=f2d159461ebb9adbfb5e5fb43e9b2c41961e1668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:6e:d3:01:bf:cf:5f:34:8e:08:99:46:dd:
14:7a:88:af:48:ab:83:4a:b3:fd:a8:61:99:e9:fd:
cf:5f:d2:a1:69:dd:48:7b:9f:ae:a0:d9:3d:5f:9c:
4f:59:62:6f:d0:47:76:6b:9c:8b:20:70:74:46:f5:
d8:98:0e:1f:69:50:55:14:e4:85:1e:cb:8b:ee:04:
0e:1f:ea:28:71:18:4f:1b:8f:d6:10:95:e7:57:c6:
60:d7:27:d1:f4:4f:16:3b:f8:f2:95:88:7e:f5:6a:
82:a0:f2:d8:65:89:52:5a:17:79:8d:96:7b:d8:49:
45:58:a6:93:6d:bc:dc:f2:58:c4:1b:c5:21:40:46:
fb:de:11:22:08:ac:3d:6f:da:15:ae:06:16:3a:31:
1d:90:2d:05:9b:c2:44:9a:79:a6:a3:d8:50:89:99:
f2:7b:5c:f2:52:b3:ad:07:5d:3d:c5:50:45:5e:6e:
81:3b:c6:b9:fa:79:2b:41:64:1a:49:28:bd:70:33:
ce:4e:29:e6:d1:86:64:64:15:8e:01:df:ce:98:aa:
d5:d2:b0:01:e1:f0:ef:f5:60:ca:46:e7:ec:7a:10:
da:61:29:e6:e6:2b:6c:75:76:d6:11:82:69:74:00:
e2:2e:58:2e:2a:69:29:0e:99:ac:4b:5c:e4:e4:8e:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:59:46:1E:BB:9A:DB:FB:5E:5F:B4:3E:9B:2C:41:96:1E:16:68
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:94:b5:9d:2f:23:48:42:51:6e:48:a7:b3:8d:44:7a:3e:
84:d0:91:f7:1f:ec:5b:8e:f5:c4:af:4e:1e:49:21:ce:7c:6f:
7b:b2:c8:d8:b5:2e:42:01:11:6d:d2:2f:ce:8a:f6:fd:d2:4e:
29:d0:04:ae:fc:00:24:8e:21:3e:f6:8c:e1:f7:13:2c:01:6a:
ed:5a:a0:42:e6:7c:de:41:d8:ca:7f:6b:e3:c4:a0:53:8a:e6:
8d:65:0d:40:c3:00:c7:11:be:55:d7:74:c9:0f:43:85:93:26:
e4:bc:6b:34:f7:57:6a:b6:c0:7c:81:59:c4:1f:4a:e8:b3:e9:
8a:0a:c9:0e:02:03:e3:72:b1:80:11:cd:ce:56:ea:e1:6e:ed:
86:19:7b:c8:35:b0:d2:01:a3:9f:60:f9:a8:6f:86:d0:dd:7a:
2c:d7:01:a8:b2:13:ef:62:ba:7b:43:eb:25:0d:6c:11:e8:a0:
cf:26:a4:1f:cd:c7:75:98:95:60:c4:3c:74:12:cb:28:d4:5f:
5d:7c:77:5a:aa:b2:80:88:04:81:a8:a0:e9:a8:4b:1a:c6:40:
fe:4e:aa:56:3d:5d:2d:a5:a5:1c:44:7a:32:63:4a:91:ae:17:
bd:75:8f:15:f1:76:45:9d:51:a2:5c:ec:2e:68:6e:d0:b8:52:
4a:fc:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:33 2025 by rpki-client