Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: 5QPYP3kxtUhU9BWp5lb+wEL9PyyYvQZ1PC8UgSiy2So=
Subject key identifier: 92:9F:49:AC:BA:DE:BD:39:7C:0D:AD:90:C6:46:26:B6:27:DE:61:DA
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 0197556C6091F8C40841B922952D0C023D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 09BB
Signing time: Mon 09 Jun 2025 16:00:55 +0000
Manifest this update: Mon 09 Jun 2025 16:00:55 +0000
Manifest next update: Tue 10 Jun 2025 16:00:55 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: aap/c4eViKcwEflWv9c0mPL5ycATa4kw1O806DJ6dpQ=)
2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:60:91:f8:c4:08:41:b9:22:95:2d:0c:02:3d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Jun 9 16:00:55 2025 GMT
Not After : Jun 10 16:00:55 2025 GMT
Subject: CN=929f49acbadebd397c0dad90c64626b627de61da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:0e:55:b3:94:11:be:b0:3a:a4:29:86:43:
5b:9d:6e:77:99:11:0b:40:d6:f6:13:df:80:72:72:
a8:0f:e5:fd:56:f2:23:f7:78:0e:14:1c:87:c5:7c:
cf:89:9f:1e:1f:f0:ac:c2:42:0a:cc:b5:64:44:a8:
26:2c:8f:7c:43:8a:5f:d0:73:21:ea:1a:01:ef:a6:
1a:e2:82:21:cb:85:72:55:f4:95:7d:7a:fd:59:08:
6d:7d:66:31:16:d1:ec:02:09:40:82:5e:8f:3a:11:
f7:07:d4:2d:b9:6a:72:33:b8:5b:04:53:40:02:4f:
1d:a3:7f:10:05:90:10:df:58:b9:d0:b3:f7:b1:6a:
e0:94:92:f1:fe:10:36:fd:08:59:ca:cf:f0:2f:16:
d6:28:2b:81:6d:09:23:cd:dd:68:f3:0a:5e:38:fe:
39:d6:36:0c:b0:20:94:08:54:c4:d5:f0:9d:65:2b:
00:b0:6c:4f:3b:67:1a:c3:23:57:22:96:ef:0f:ee:
f0:a3:c6:fb:b5:7e:b2:c2:38:cb:f9:2a:4c:23:b8:
7d:c7:ca:7f:c9:33:b6:89:04:d0:64:d7:90:df:45:
8e:c7:6f:f6:5d:ce:d4:d1:a2:73:cc:48:29:e2:18:
a3:31:47:d9:c4:e4:83:e8:b0:80:e9:34:67:d0:d5:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:49:AC:BA:DE:BD:39:7C:0D:AD:90:C6:46:26:B6:27:DE:61:DA
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:b6:95:9d:ce:4b:94:ac:72:6e:1c:c4:37:23:64:91:2a:
5c:7b:84:b8:0b:19:47:26:e9:f1:cf:ac:75:50:4e:4f:07:6c:
b2:3a:dd:2d:5a:4c:af:f0:c9:65:c7:6e:fd:15:50:31:4f:13:
75:8e:61:96:26:5c:bd:1c:e3:14:0b:89:dc:9d:76:eb:25:17:
2b:9a:bb:0c:ff:92:89:6a:c7:3c:1f:82:94:92:dd:c2:25:16:
47:36:1a:8b:c1:6b:3b:35:c8:bc:93:77:19:2b:b3:d1:38:7b:
37:40:99:a7:d5:94:43:c2:63:d3:52:1b:0d:ca:65:2f:96:9f:
23:61:50:26:06:88:78:7f:c1:34:88:2f:bc:6c:5e:0d:91:fc:
ba:57:40:3f:d5:a9:1f:0a:13:a9:d3:e4:d1:e9:6a:a5:cc:07:
c6:68:d0:8c:e9:bb:b2:25:7a:dc:24:2a:53:89:8c:c3:4e:d3:
35:9a:78:2a:b0:4b:57:92:20:57:ce:94:8c:ac:dc:2c:ff:a1:
23:93:d7:c6:65:fb:9f:e4:73:d7:2e:24:16:55:12:3b:a0:8a:
de:5e:af:bf:b0:c4:0e:4f:6f:8b:49:90:34:56:9b:4e:0e:d6:
5e:99:99:ab:6b:b7:58:8b:50:6d:b9:e3:05:e9:9d:0c:db:73:
18:3e:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:59:59 2025 by rpki-client