Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: dnscGM3RdRkqHYWq+GytywySkJtVhRL5IEJb/su+NHo=
Subject key identifier: 8D:F7:D8:F5:9E:FC:27:FC:E3:4D:0A:2B:5F:1A:9B:67:05:3B:1F:08
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01974FD7BBBD4ED2E98F8A457C5338399791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 07C1
Signing time: Sun 08 Jun 2025 14:00:27 +0000
Manifest this update: Sun 08 Jun 2025 14:00:27 +0000
Manifest next update: Mon 09 Jun 2025 14:00:27 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: /iubp98mlzFFwM9FhZ47MuXzmAwMEZsrPtz3v/cJvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:bb:bd:4e:d2:e9:8f:8a:45:7c:53:38:39:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jun 8 14:00:27 2025 GMT
Not After : Jun 9 14:00:27 2025 GMT
Subject: CN=8df7d8f59efc27fce34d0a2b5f1a9b67053b1f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:c7:1f:3d:f9:10:f3:2d:3c:3e:ff:0d:25:
7a:b4:57:68:14:9f:2a:c6:27:cf:48:92:36:e3:db:
fa:0f:81:53:ae:58:d9:b4:de:ef:f7:be:65:2d:eb:
81:3f:cf:17:31:b9:81:fa:ff:21:f0:51:6f:9b:6d:
b6:9e:89:c2:2a:7e:3a:d9:04:7e:4e:fe:93:aa:db:
db:1f:8d:d4:80:42:55:e7:62:bf:f6:5a:e1:f7:ba:
a8:81:f2:08:22:9f:7b:c8:b9:72:45:b1:0c:07:83:
bc:e4:64:7c:be:b4:15:65:46:0d:7c:43:1d:36:d6:
e9:8f:af:85:68:e9:8f:9e:a2:dc:9d:8f:c9:17:a9:
ca:e4:cf:cc:d5:ca:5e:61:aa:09:29:b8:ff:56:3b:
bb:a3:d4:69:94:f1:d5:c8:5c:15:6c:ac:db:e8:cb:
6e:67:31:ec:b2:61:4c:00:05:4d:9b:c8:6e:ac:05:
2f:f8:86:18:7c:f5:13:b0:3f:5d:fb:e4:10:46:d8:
7a:a1:cc:b4:3c:af:c4:ce:0c:df:b1:4c:9c:12:5a:
7c:b8:fd:a4:e2:91:8a:01:cc:93:84:0f:87:38:5f:
10:d3:c0:32:6a:82:a7:44:cd:19:b7:a0:6c:e6:97:
3a:d3:d1:44:8d:57:dd:5f:76:6a:f9:c6:e1:f5:0a:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:D8:F5:9E:FC:27:FC:E3:4D:0A:2B:5F:1A:9B:67:05:3B:1F:08
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ad:7a:4e:24:d6:f4:0d:26:43:46:ef:4f:65:d5:b5:d7:2a:
41:6c:24:5a:8f:a8:80:e1:86:d3:94:b5:17:28:66:0d:cb:85:
55:bd:8d:21:cd:25:49:83:87:e7:65:b5:b1:67:09:08:dd:2b:
ef:d5:90:33:9c:32:c3:06:e1:1c:95:0f:1c:86:08:6a:59:79:
e5:6e:ca:af:d5:4f:02:ad:45:77:0d:7c:08:94:4d:49:99:2d:
e1:d8:35:3f:c0:83:47:34:76:67:68:45:8e:b1:4e:25:55:8e:
39:41:b8:1b:02:23:87:21:6b:95:59:26:06:74:d2:66:c3:17:
3b:60:29:37:49:89:ea:c9:ca:51:ec:30:d2:80:05:c2:62:33:
2e:b3:84:e7:96:5c:ea:3c:2b:77:3a:9b:5d:5c:78:db:e3:fd:
64:9c:56:96:8f:de:d8:c7:e6:83:76:17:ca:93:e3:f4:82:5e:
fd:2b:65:0c:86:ee:5e:90:28:8e:d2:4a:d2:6d:2e:cc:9d:4f:
e5:19:0f:a7:63:00:dd:37:3d:d6:66:82:d5:e1:e3:55:d1:a4:
2c:4f:18:c2:68:2a:0a:47:00:4f:dd:c2:28:f1:6a:b0:ab:96:
a2:ca:09:52:36:9b:08:64:6f:f5:ec:7c:dc:fd:dd:cc:6b:74:
3a:e4:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:44:40 2025 by rpki-client