Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: c0KcGhd5k++qkXxTBoglnoHp8K6xpePCbtNuFnboRUE=
Subject key identifier: F6:65:23:45:30:85:78:CC:D1:70:5A:2A:21:52:5F:B4:E7:3E:40:17
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019935015F5EB5E0FA98C559A30B9BE7F23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 19:01:46 +0000
Manifest this update: Wed 10 Sep 2025 19:01:46 +0000
Manifest next update: Thu 11 Sep 2025 19:01:46 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: iwDFpk7A9HenXOn7z2uNUVS3FI44pF2J9b0ZZfh5cJY=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:5f:5e:b5:e0:fa:98:c5:59:a3:0b:9b:e7:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Sep 10 19:01:46 2025 GMT
Not After : Sep 11 19:01:46 2025 GMT
Subject: CN=f6652345308578ccd1705a2a21525fb4e73e4017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:ac:f7:d3:32:9c:e9:24:62:92:04:50:6b:
ac:99:97:23:00:9f:05:45:36:3d:39:5a:47:78:06:
a4:a1:84:f5:bb:86:f1:d0:43:bd:9b:c3:7b:b3:59:
ad:bc:c6:b4:5a:88:30:8c:1e:ec:bb:8b:c8:8a:71:
e5:ae:f3:7c:12:69:29:12:4e:34:9a:8e:4e:2e:eb:
9d:ea:47:dd:4e:6d:bc:12:36:4e:68:fa:44:05:43:
7f:54:27:77:c8:b9:7a:4f:d0:d1:ca:11:ea:6f:de:
81:0f:37:f4:4b:21:ce:0f:32:c3:22:d0:30:29:30:
91:b0:44:9a:97:1c:6a:43:10:50:29:8b:01:99:7a:
6c:5e:2d:ae:d1:d1:b0:28:2f:01:f0:5c:9f:88:bf:
98:ec:c6:e9:55:53:c5:a3:ce:22:b3:11:94:2a:03:
72:c1:f6:5c:f1:12:35:23:33:8a:2d:01:f6:ab:c2:
a3:e6:51:60:b0:4d:2f:16:3c:98:8b:e8:2e:af:1c:
24:fa:38:7c:4f:6a:7e:6c:e6:2b:de:a6:3d:52:40:
ab:1c:1c:c3:3c:6d:5f:8d:1f:e2:61:75:10:37:86:
75:1d:b8:5b:d4:a5:c2:09:4f:c4:20:4c:85:56:09:
6c:e7:0a:56:17:58:a6:41:52:16:68:26:70:93:5f:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:23:45:30:85:78:CC:D1:70:5A:2A:21:52:5F:B4:E7:3E:40:17
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:4f:c9:79:c8:15:d7:1e:5d:ec:ad:ec:5a:9d:b5:b6:5d:
5b:3a:d1:f3:df:87:00:c9:fd:2c:21:14:b4:3f:c9:e8:03:35:
6c:b5:13:f7:a1:49:82:5e:b4:d7:21:59:b2:63:57:75:3d:03:
c8:23:a5:49:0e:1e:6c:58:ad:5c:c1:f2:90:4a:95:59:d9:63:
fb:03:62:4d:4e:4c:78:0b:5e:6b:20:46:dc:e3:9c:46:62:2d:
93:90:8c:59:6f:a2:9b:a4:bd:fe:b5:e8:32:86:78:5b:24:4a:
48:99:0c:5f:a6:b5:0e:9f:57:dd:41:28:ac:9c:b7:b1:58:58:
a8:45:d4:e9:c6:04:82:f8:b0:27:0a:70:24:aa:37:71:82:01:
55:e9:c9:70:84:41:09:7d:45:e8:c0:af:32:60:2e:16:de:69:
55:7c:f1:99:a7:36:e6:9f:d6:ea:f7:11:8a:5f:91:eb:15:61:
89:82:2a:32:8d:78:39:ba:43:30:2a:1f:33:09:0a:10:5d:f2:
d1:1b:c6:49:62:5f:73:51:8c:2c:8b:47:95:1b:ca:09:84:4f:
a9:fe:79:e3:6d:15:7a:cd:f4:cf:43:4b:fe:2f:be:70:d3:ce:
f4:e8:35:d7:8e:cf:4f:83:60:8c:ff:03:ed:bc:4e:9d:2a:b1:
94:24:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:34 2025 by rpki-client