Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: hE1GPq1GF76S0me64lSznIhxWhd4kXgApN0AOALvPsw=
Subject key identifier: D4:E3:6B:0D:92:70:6D:27:AA:51:C7:4A:B0:1F:3A:F7:FA:3E:A5:78
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019848F766DC053DE3E051D6AD52C7E6FD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0A90
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: BL6Er5sDDRIkOfYpfDyByGeIcukUDXtYJz3aoEkNw4k=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:66:dc:05:3d:e3:e0:51:d6:ad:52:c7:e6:fd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=d4e36b0d92706d27aa51c74ab01f3af7fa3ea578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:ab:b2:9d:e9:ef:cf:b1:07:01:bb:57:3c:
5c:8f:76:e5:11:28:c6:8a:0a:87:ef:1d:49:68:73:
be:c9:41:b7:14:d8:d1:21:48:04:d2:ab:95:a2:f3:
a5:93:2a:65:d3:6f:0b:5a:69:54:77:98:e3:41:47:
bc:22:c2:bf:a9:99:9b:8e:d0:da:f0:89:5f:b7:39:
81:fd:dc:23:85:c5:68:3a:f3:06:aa:1a:cb:5e:56:
78:3d:86:58:1c:fc:e3:f7:8c:6b:0d:72:59:5e:d2:
a1:1c:22:fb:d5:cc:e4:c6:37:77:39:bd:71:3c:7d:
5d:d0:42:e4:ca:81:28:b7:c8:a6:84:1d:6c:ae:e3:
56:60:43:28:75:76:14:65:ca:b8:1a:f6:dd:7a:a8:
47:1a:80:6a:16:82:bb:4a:0f:87:1e:03:b7:8b:22:
84:37:fb:e3:fc:e2:60:9b:e7:6c:e9:83:79:54:b6:
56:ce:2b:2a:eb:e8:fd:4f:9b:c0:c7:da:c6:5f:e9:
a2:0d:90:2e:e7:3b:1f:62:84:e7:fb:01:06:5b:ae:
8f:4c:7a:45:65:92:4a:05:2c:8d:a3:81:7a:c3:27:
a3:43:37:e4:f5:bd:12:41:67:4e:e3:d8:27:cf:3e:
03:3c:90:66:9c:cf:f4:7c:8f:78:a9:8a:d2:95:9d:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:6B:0D:92:70:6D:27:AA:51:C7:4A:B0:1F:3A:F7:FA:3E:A5:78
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:41:9e:e5:23:90:f1:92:d6:67:f6:b9:e1:1f:12:80:b9:0b:
dc:31:17:54:56:88:50:84:be:88:d0:e4:cf:4e:d2:37:87:3b:
9e:95:62:9c:cf:74:98:18:08:d7:24:87:59:36:15:7e:06:be:
a4:d9:52:4e:e6:f8:17:88:67:b2:4e:9b:d2:2d:48:20:7a:bc:
82:52:41:06:e8:28:b0:96:ac:78:6b:36:e8:97:7c:d2:e3:a5:
34:aa:8b:b9:13:41:a9:e9:36:96:01:e2:01:18:91:94:cf:43:
11:0a:c3:64:88:0c:53:8a:fc:76:7f:c8:33:ba:b5:0a:cd:ba:
ac:0f:08:28:ee:40:ff:34:d3:46:5f:1e:aa:f6:01:ad:aa:0b:
62:b2:04:dc:ab:5e:6a:b1:cc:ae:75:3f:31:50:ae:bc:fb:a3:
2e:d3:19:1c:c9:b1:98:8e:8d:a7:0b:44:56:09:1c:8f:f1:b8:
da:aa:58:7e:cc:03:2c:14:6c:98:34:eb:1f:bb:57:3d:b1:ef:
a8:01:9a:9c:67:48:72:83:4f:bf:21:c3:6d:19:d4:f0:55:ad:
4f:12:d7:21:f6:26:ac:f1:73:5d:9c:35:95:e9:16:57:73:c1:
52:14:30:10:6c:48:e8:cc:25:5d:ad:3c:d8:0a:7d:b7:51:87:
ff:00:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:27:22 2025 by rpki-client