Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: TBdoa7kIRwgNX3216Zsmhluku4sJZcWFDO9r3X8r/RM=
Subject key identifier: 3B:32:DA:3B:21:F9:C3:45:72:87:47:DA:36:84:2F:C7:4B:B7:E7:C1
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01974C69E059DDE7E18CA564F364A91E1206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 086B
Signing time: Sat 07 Jun 2025 22:01:36 +0000
Manifest this update: Sat 07 Jun 2025 22:01:36 +0000
Manifest next update: Sun 08 Jun 2025 22:01:36 +0000
Files and hashes: 1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: KQP8gAs6BtTatxtWzd4f/suXD5X/fedoRBRcCBjhekg=)
3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
4: kMR-QfeDtCXrH6KaC8fd3q46UD0.roa (hash: 3G94bGBmGhHgTXEu5GeWzI4ZUQXww57vFy+evvpPr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:e0:59:dd:e7:e1:8c:a5:64:f3:64:a9:1e:12:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jun 7 22:01:36 2025 GMT
Not After : Jun 8 22:01:36 2025 GMT
Subject: CN=3b32da3b21f9c345728747da36842fc74bb7e7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:99:3a:d6:18:dd:bc:f1:3c:0d:69:63:3a:
4a:97:d5:9f:f2:61:43:f8:b5:53:ea:bf:3e:00:40:
a7:38:80:52:9e:1f:25:c4:df:84:c6:9b:c0:68:e1:
79:3d:12:f5:c1:dd:2c:17:6b:fa:05:e5:47:72:1c:
04:45:e7:5a:45:f1:9e:8a:44:e4:74:a6:82:7e:a0:
c6:8a:22:05:67:84:a0:ee:47:97:d8:c5:4c:c7:bd:
d5:b4:61:a8:5d:d3:81:20:a4:5e:f8:e6:24:84:3b:
98:04:ac:ac:f5:b9:6e:10:3a:43:0e:17:2d:40:9d:
8b:64:97:75:84:59:2e:44:14:dc:ec:d3:7d:fc:27:
22:ae:59:c5:99:32:1a:e8:52:4a:5d:47:2e:93:86:
6c:de:76:90:cf:20:73:71:b1:13:00:68:f0:29:9b:
0d:e8:1c:7f:f8:92:88:41:df:93:37:64:37:80:11:
8e:b4:4d:6e:e3:ea:a8:f7:f1:60:90:be:dc:17:f9:
b7:c5:e4:b0:5a:c6:17:49:8e:26:75:7d:07:85:8b:
29:b7:94:42:cd:f1:e1:82:47:86:9f:97:7b:60:16:
ed:32:33:c6:25:95:e7:3a:cb:22:72:1e:3c:4f:9b:
41:01:56:7b:42:69:9b:5f:53:a1:70:bc:39:2e:e1:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:DA:3B:21:F9:C3:45:72:87:47:DA:36:84:2F:C7:4B:B7:E7:C1
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:18:f9:a2:2e:d5:ca:3f:32:d1:9c:8e:fe:8b:83:05:7b:a1:
6e:b8:e7:38:33:a0:78:e8:01:ef:2b:14:b7:40:25:a0:60:45:
63:d1:b4:dc:7c:c2:9b:9c:b9:60:2f:5f:f0:09:5e:17:bf:a9:
15:3c:20:ab:9a:5d:f2:54:b6:1c:02:61:3c:d7:7d:10:00:ed:
2d:72:d6:ad:94:4e:84:3e:7a:3c:b0:70:f0:ef:7b:e0:6c:46:
5d:e7:49:9b:a3:cb:8f:4b:45:b6:20:cd:33:5e:64:5c:e9:28:
0d:68:0f:a2:7b:82:96:5b:e2:07:50:da:9f:61:58:e1:7d:47:
fd:dc:ef:69:a8:51:79:f5:a0:c8:df:51:a0:13:27:03:bb:e3:
0e:19:80:9b:fe:ac:3b:f2:a2:61:13:5e:33:96:fd:37:52:f1:
bb:b4:55:a4:33:7c:dd:ab:54:dd:77:81:9c:48:a4:86:b9:64:
89:f2:7e:cc:3a:90:5f:2b:bb:9d:8f:7a:25:fb:5c:bd:2e:3a:
36:cc:60:72:69:3b:57:01:25:85:d6:54:a6:06:c6:47:9f:7a:
b2:5c:f7:b2:72:01:cd:ba:a7:f6:e5:e0:0d:48:eb:49:32:d4:
c7:3f:c3:36:cb:94:e8:5f:b9:cb:2a:fe:a9:75:23:14:f0:e5:
c6:f8:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:48 2025 by rpki-client