Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: Y+XlOEk4Zw1hrtX80eV1nfr5fSpaUjKmqIDTSVjhREU=
Subject key identifier: C7:45:D0:A6:F7:2C:B5:B2:4E:44:0D:A3:F1:36:93:61:D6:1A:AF:B5
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 01974B8DCE955A1F326BD5D5C2444E823A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 0442
Signing time: Sat 07 Jun 2025 18:01:13 +0000
Manifest this update: Sat 07 Jun 2025 18:01:13 +0000
Manifest next update: Sun 08 Jun 2025 18:01:13 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: /7+BBMEIUqY466oZilEGIX+T4JO6N7eaJj4Z699SdzM=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:ce:95:5a:1f:32:6b:d5:d5:c2:44:4e:82:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Jun 7 18:01:13 2025 GMT
Not After : Jun 8 18:01:13 2025 GMT
Subject: CN=c745d0a6f72cb5b24e440da3f1369361d61aafb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:3a:26:76:86:88:7c:f8:d8:ea:36:3e:24:
d5:f2:01:44:26:f5:78:88:a5:fd:e6:0c:27:4c:fd:
7c:07:3e:43:23:66:74:d2:00:b7:17:52:1b:44:9e:
3e:3d:3d:00:22:5d:ea:eb:49:e7:94:d5:ac:fb:9e:
6e:e4:32:8b:89:99:7c:a4:59:d6:ea:b4:e0:24:50:
40:20:e3:03:12:1e:c5:2c:80:14:e7:f3:2b:6c:49:
e5:05:80:11:f3:7c:9e:56:a5:12:61:b4:4e:c7:04:
cb:4c:fb:a3:33:ce:ff:96:60:94:52:ef:74:4c:e1:
30:a1:51:a9:57:53:ca:d9:88:02:e7:1c:18:f4:c7:
2f:44:1f:01:48:dc:d3:30:00:be:c9:88:2d:e1:7e:
94:b1:a9:f2:3f:14:e9:1a:f3:8a:84:c3:05:4b:15:
81:01:dd:63:9c:19:09:f8:94:09:5f:a1:28:fc:d3:
21:5f:a5:cf:99:1f:ee:87:e2:b0:99:08:4b:24:55:
1f:2b:cb:e0:08:77:a9:71:29:d6:2d:6c:e9:82:d0:
3e:f5:39:c5:8d:18:05:9b:52:e2:29:78:17:d6:a3:
03:d0:b0:d3:ef:0e:d1:da:50:84:20:0a:a4:80:8a:
0e:35:d3:ee:ba:33:db:3f:65:a4:1f:5f:a3:99:82:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:D0:A6:F7:2C:B5:B2:4E:44:0D:A3:F1:36:93:61:D6:1A:AF:B5
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:3f:58:4a:f1:f1:58:c8:73:ec:6a:e0:c6:dd:c9:3f:ff:
7a:31:3f:08:a4:e6:f0:2b:9b:e1:18:c0:40:6b:e5:a8:3c:70:
55:c9:bb:0f:f0:e3:d4:60:f6:db:02:6c:c5:27:18:0e:07:8e:
5b:7f:d5:31:c5:c9:b4:6a:0f:2f:26:7f:c4:47:a0:0d:b3:54:
d2:0d:16:89:07:e4:e7:92:7d:de:20:56:e1:18:b4:3b:f8:59:
75:9c:68:42:df:47:58:90:cb:bb:51:56:e5:4a:bc:65:97:a9:
93:2c:55:3e:85:e4:e8:66:16:40:74:0e:5a:27:e9:ee:34:f8:
3a:d2:65:78:5a:13:2d:6c:01:46:90:42:b9:58:7e:39:1c:66:
a8:e5:cc:b8:38:de:1e:ad:32:2d:d5:42:1e:11:08:e6:5e:13:
59:c2:0c:44:34:b3:f2:a8:ec:c9:d9:a0:6e:bf:bb:4b:0d:ea:
b5:fe:58:57:9b:8a:51:c2:85:3a:1f:15:50:3b:87:d1:e8:d3:
b0:e0:ed:8f:1d:0f:8e:c4:92:98:e8:54:12:77:f8:ea:7b:ec:
f8:67:99:f2:0b:f4:55:7e:d9:a3:e9:95:d9:af:f7:ba:02:24:
cb:80:d7:b4:73:de:a1:1e:51:f7:c2:ca:a8:67:8c:bc:21:09:
8d:47:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:19 2025 by rpki-client