Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: q5fxjhT7IZtJWckRq6YwuV26H8Kj7E5CyEaM9jOTj/g=
Subject key identifier: BA:CC:1C:81:6E:67:01:C9:A8:7C:C4:B5:11:A2:26:8E:92:E1:C4:42
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 01974BC439FD21B6AE07BC9644923FA31C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 1364
Signing time: Sat 07 Jun 2025 19:00:40 +0000
Manifest this update: Sat 07 Jun 2025 19:00:40 +0000
Manifest next update: Sun 08 Jun 2025 19:00:40 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: JtzRzMm6sNy0bt6cM5tbP7iINB6vKd5zypg4gFsYIVM=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:39:fd:21:b6:ae:07:bc:96:44:92:3f:a3:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Jun 7 19:00:40 2025 GMT
Not After : Jun 8 19:00:40 2025 GMT
Subject: CN=bacc1c816e6701c9a87cc4b511a2268e92e1c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:7d:4f:0e:c3:eb:ab:25:9e:f3:f7:24:4b:
a2:08:23:02:7b:4c:fd:83:86:4b:d0:1e:dd:a1:3b:
73:b1:06:bf:a2:79:e3:02:32:e8:c4:af:ca:da:6d:
b5:a0:52:62:23:a9:3e:63:f3:47:c4:13:c2:c5:c0:
df:86:5e:9f:1a:24:51:06:97:25:36:25:af:9e:98:
1f:8e:47:49:c1:0c:cb:93:83:95:59:3e:69:43:f0:
50:04:8a:91:9d:c6:9f:d7:21:27:09:f7:6d:bd:6d:
d8:10:8a:d5:17:d2:d2:3d:4a:3a:d5:01:13:8b:da:
fa:6a:d1:84:7c:83:98:b9:c8:51:70:52:0a:6d:ef:
f7:71:f3:ad:1f:09:0b:4d:a4:77:89:e8:fa:8c:aa:
4b:95:23:2c:f4:59:61:e8:d8:31:3c:1c:71:5c:a3:
c1:05:37:96:7c:08:fb:3c:f3:4f:c2:08:dc:3f:7d:
8d:1a:84:39:01:e8:49:e7:70:ff:e2:9f:5e:dd:02:
04:97:c9:87:77:03:17:1e:14:21:65:fe:09:07:3d:
b8:44:2c:eb:fd:c5:ba:46:7c:62:a3:99:2e:cb:1e:
98:6b:d6:57:f5:32:08:93:12:8e:18:cc:ea:51:20:
ff:c2:22:13:2a:e6:19:b6:ea:b5:30:7e:63:af:d3:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:1C:81:6E:67:01:C9:A8:7C:C4:B5:11:A2:26:8E:92:E1:C4:42
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1a:33:2f:07:25:bb:3d:75:0b:74:74:0a:a8:1a:6a:62:e0:
be:6a:24:12:e6:09:f4:53:f3:d2:e5:f9:70:72:61:5e:59:43:
5c:df:a6:aa:98:4f:2f:59:e2:58:7f:bb:e6:0e:4a:71:ba:3e:
93:89:bd:62:af:9f:52:7f:84:99:94:b1:73:c7:a9:64:a4:36:
97:23:4a:ef:37:af:ed:b8:27:ef:35:a8:fb:27:be:74:47:b7:
73:14:98:2e:b0:f1:4e:36:ee:2d:77:e9:41:aa:74:1c:0b:bb:
16:b2:40:4a:a7:3e:b5:6b:2f:fd:b0:00:c1:35:27:f4:d0:4e:
dc:f1:65:6e:d3:04:21:fb:42:57:b3:4f:bd:b4:3a:20:ab:f2:
70:e5:d6:fd:d3:6a:7f:42:d3:59:9e:41:43:40:56:51:aa:f7:
49:49:4b:a6:8f:d7:9b:30:54:3f:02:15:f3:52:0b:97:dc:f9:
c4:8e:3d:b9:bc:fa:80:0b:10:79:a0:47:ab:9d:be:89:ad:96:
e7:04:b7:d6:e0:b6:3e:85:5c:79:82:51:fe:2a:bb:86:e7:4c:
50:9e:c4:67:64:6e:18:50:c7:bd:7a:52:ee:78:0f:9c:f3:ca:
41:67:2c:2b:fc:21:79:35:59:d1:71:fe:a6:92:96:ed:44:09:
a8:f1:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:12 2025 by rpki-client