Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: a2EPgFS7Y2OZQ0jAYBaxR9/D7XAEYCmp1ZVca3ApLek=
Subject key identifier: FD:60:57:A8:9E:65:B2:D6:DD:84:19:DD:7D:BD:9C:57:46:F0:C9:A6
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019886C40DF4509B83D1E045CFFA06192FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 03B2
Signing time: Thu 07 Aug 2025 23:00:52 +0000
Manifest this update: Thu 07 Aug 2025 23:00:52 +0000
Manifest next update: Fri 08 Aug 2025 23:00:52 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: S/ngY/vBn66cfvj+CjZmnG3rO4RQXdOW5koDobtn6cs=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:c4:0d:f4:50:9b:83:d1:e0:45:cf:fa:06:19:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Aug 7 23:00:52 2025 GMT
Not After : Aug 8 23:00:52 2025 GMT
Subject: CN=fd6057a89e65b2d6dd8419dd7dbd9c5746f0c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:93:46:54:25:eb:50:7a:4e:c7:f1:ba:97:
f4:7e:a3:26:69:0a:ff:59:92:6c:cb:70:85:31:2a:
ce:68:37:a9:a7:03:70:f1:bf:4c:db:3f:47:5a:a2:
9d:59:6f:2c:fc:ad:b2:19:2a:f7:d4:94:55:cf:f0:
73:ab:30:1e:9c:d0:a7:90:8b:29:94:50:09:63:d1:
7d:7a:0b:b0:04:8a:2d:06:2c:09:8b:ed:5c:8e:2a:
76:b8:9f:2d:1d:a1:de:66:b1:0f:2b:36:36:a6:d3:
bc:56:34:1a:bc:ff:bb:3c:75:26:f6:fc:40:b0:a1:
31:23:ea:5f:1d:5f:c4:1c:e0:6b:09:55:60:ad:84:
a9:46:07:10:d5:ea:d0:41:46:da:81:16:eb:70:c9:
04:23:1a:48:4c:1f:de:59:a1:8f:27:41:77:18:81:
64:58:ae:06:6d:01:cd:d6:b9:26:98:a4:09:3c:7e:
f9:b3:f6:9b:85:2c:89:4f:72:a9:55:1e:31:a3:e0:
fc:b9:d6:73:f2:99:83:9b:82:c4:70:60:57:71:f6:
90:1f:d8:f8:8b:90:84:2f:63:f2:fb:f4:ba:f5:2f:
6e:07:3b:1e:04:25:ec:25:d1:51:56:c6:26:d0:ea:
b9:7d:02:4f:78:a9:32:91:50:43:b2:c7:88:94:6a:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:57:A8:9E:65:B2:D6:DD:84:19:DD:7D:BD:9C:57:46:F0:C9:A6
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3e:65:b8:26:f6:f3:64:90:1a:04:c0:30:c9:50:de:eb:30:
72:58:60:df:75:8c:12:c9:12:00:0f:c1:08:e7:ec:94:0e:38:
4d:db:0b:a9:aa:47:8f:ea:2d:4b:55:85:1a:51:85:fc:f9:e7:
1d:86:64:61:79:b5:0c:58:b2:dc:43:e8:f2:f2:18:b0:7c:d2:
c0:54:13:72:75:8a:77:21:03:62:47:16:3f:5f:86:09:85:86:
9e:f1:67:2e:af:2a:95:1a:ff:a6:29:1b:33:bf:8d:6b:a3:a3:
dc:af:0d:e0:d8:79:c7:eb:2e:84:aa:9a:07:84:40:0c:c5:62:
07:3a:f1:03:39:e9:f6:08:54:e9:a3:1a:ae:f2:18:f1:d8:28:
f5:fb:87:1c:50:48:f0:24:fe:11:4c:03:0a:70:be:d3:f0:bd:
89:21:46:09:44:2e:bd:54:1f:e1:01:86:1a:f7:37:fa:39:24:
bd:a2:d3:6a:2d:75:ac:5a:28:06:20:d4:7f:47:bd:c7:d7:5c:
c9:d7:45:d4:0f:30:68:2d:ce:de:53:fd:05:82:49:67:9e:b3:
b6:a7:27:2f:c7:ce:24:27:bc:fc:59:21:0b:8f:dc:0f:45:9b:
76:ae:ea:d8:65:e2:10:08:3f:b0:6d:99:46:e2:37:fd:12:30:
2e:c3:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:56 2025 by rpki-client