Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: KDuJj6EPZiQRVHgCPFIKbNgz7eVC/9RleSZ3OU42MNU=
Subject key identifier: 8C:FD:38:A8:50:94:A9:B9:10:54:E7:F7:04:37:FD:96:18:0A:00:97
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01974FA1317FDFDA48F5DF4250DACE583FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 018A
Signing time: Sun 08 Jun 2025 13:00:53 +0000
Manifest this update: Sun 08 Jun 2025 13:00:53 +0000
Manifest next update: Mon 09 Jun 2025 13:00:53 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: o7pLkAFRHthnLrwZWDVmJud8S1pjZO3lR1QR5xFQ7ao=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:31:7f:df:da:48:f5:df:42:50:da:ce:58:3f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Jun 8 13:00:53 2025 GMT
Not After : Jun 9 13:00:53 2025 GMT
Subject: CN=8cfd38a85094a9b91054e7f70437fd96180a0097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:17:ae:ba:9a:59:5e:c9:00:36:42:de:49:
7a:46:a4:1b:a4:1e:4d:59:0b:6c:3e:37:d4:7b:08:
8f:ec:8d:60:c7:b0:a5:86:cc:bc:26:a7:5c:82:4b:
ca:17:a9:34:6c:d0:8a:77:a5:d7:6c:b8:84:41:8d:
9a:d8:ca:59:e7:c7:7c:58:4b:0e:ef:b7:29:aa:4e:
d1:30:e6:64:16:1c:61:65:3e:6e:f6:f6:69:f4:cc:
c0:2a:b8:99:f4:e7:43:ad:92:61:28:07:20:57:cd:
54:0a:9d:bd:42:5d:d7:46:85:8b:ad:de:ba:94:ea:
ba:fd:59:fc:a3:25:3c:1a:67:02:e9:f7:ad:75:3a:
40:c1:2f:33:4f:b9:7d:2d:a0:b4:12:8c:1e:fd:82:
16:5b:b5:d7:fd:16:b7:e9:a6:aa:63:18:c2:9a:9c:
25:02:71:32:15:98:30:ef:03:39:47:6a:ad:1c:21:
a8:65:76:e6:bd:21:27:57:2a:b9:84:f8:ca:85:6c:
4f:89:28:8a:f3:8b:f4:88:c7:90:be:61:96:3f:03:
0c:ec:99:f2:24:12:3b:f2:5b:86:07:d5:78:9b:67:
6d:38:ba:b7:9d:ab:3e:0d:8d:ac:ee:27:6a:17:d8:
ba:dd:45:33:7e:7c:98:d5:f2:3b:d0:ce:95:83:b8:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:38:A8:50:94:A9:B9:10:54:E7:F7:04:37:FD:96:18:0A:00:97
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c8:ae:77:74:c0:2f:78:e2:94:1c:7f:1c:76:99:77:9f:a5:
b5:7d:b6:73:8c:5b:f8:09:10:9a:e8:be:6e:63:d4:d3:d4:ce:
6b:87:aa:8e:91:29:06:e3:04:71:42:a6:53:4a:6d:21:5a:21:
37:07:72:8c:3f:eb:47:aa:c4:eb:48:25:22:3e:2b:c9:a6:c3:
02:c4:1a:86:e8:ee:79:8e:7e:e1:1d:cc:4e:ee:58:36:95:9c:
53:5e:bf:ac:fe:c4:5d:80:ed:1e:13:8a:16:db:07:54:99:09:
38:96:d8:9a:b9:f9:87:3f:09:05:92:36:3a:7b:1b:e1:ba:01:
08:f1:47:11:a6:5f:b5:a2:00:86:a3:11:23:d3:fe:2f:04:73:
35:fa:40:a5:14:74:96:3e:06:5d:28:a1:46:2d:c8:ed:fb:1d:
9e:1a:c6:de:69:41:1f:c1:94:9e:84:eb:42:68:4c:6c:19:1d:
fd:4e:50:a3:22:8d:86:97:06:72:c0:50:1c:79:74:9a:89:63:
ea:13:e3:8a:2a:23:62:df:20:31:7f:76:07:af:eb:d5:00:50:
12:c1:22:39:3a:3d:05:4d:5b:71:f1:8d:fb:de:b2:0d:7b:25:
f4:52:dc:3a:6d:2d:2a:eb:ec:0e:c6:8b:54:22:1c:3f:c2:2d:
32:a9:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:07 2025 by rpki-client