
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: cOJWEVV4uXXl3IshjbymmNbfFh2kR6VRgZqtp1B3LOc=
Subject key identifier: 58:A7:28:62:04:9A:6D:C0:F5:DD:0F:F1:91:02:6C:55:D1:4A:F6:49
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019879AE1685CF858EE1C3F044E4F4B3A5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0BA6
Signing time: Tue 05 Aug 2025 10:01:48 +0000
Manifest this update: Tue 05 Aug 2025 10:01:48 +0000
Manifest next update: Wed 06 Aug 2025 10:01:48 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: aZ9hVZPgUYa9WwaKR45X6Pp0pmnuE+5OlITJT+Wcbps=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:16:85:cf:85:8e:e1:c3:f0:44:e4:f4:b3:a5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Aug 5 10:01:48 2025 GMT
Not After : Aug 6 10:01:48 2025 GMT
Subject: CN=58a72862049a6dc0f5dd0ff191026c55d14af649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:49:38:21:03:64:a9:64:6e:78:f3:c4:3b:86:
0a:1e:eb:a8:32:77:3c:68:2a:85:c9:d8:a0:8f:d4:
32:e2:a9:46:0e:78:c4:2d:91:2d:1b:2e:05:13:95:
a8:b0:76:ae:4d:02:eb:dc:e3:f9:3c:5b:43:74:00:
e1:9a:c1:2a:10:38:3b:31:cb:c9:5a:cd:fb:ce:36:
78:37:53:b9:4d:c7:0c:37:a2:ae:c3:3c:da:60:60:
f0:d0:34:b3:c4:9e:32:2b:30:2f:2c:49:c9:de:70:
8a:b3:85:0d:18:ca:cb:d8:4b:70:6c:b4:2a:6d:5c:
c9:23:a0:b7:fc:fa:8f:2d:32:01:0b:1a:07:3e:20:
9d:37:75:94:86:ae:b7:23:0a:96:4d:92:a7:84:d7:
92:51:a4:08:7f:a9:3c:d7:3c:bb:32:f5:32:f6:14:
d4:e6:b0:92:87:88:cf:9b:95:a5:55:f5:0d:eb:53:
4c:29:1d:94:da:ff:a8:c5:4a:66:7e:5e:9e:97:dc:
e5:36:24:68:30:bb:0b:10:db:c1:94:f6:41:21:9c:
41:91:d5:54:29:fc:14:33:8d:f0:1b:57:64:54:89:
f4:bd:ff:04:6b:82:78:a2:ed:59:ba:82:f4:76:84:
2b:99:7a:fb:3e:d1:d2:a6:1d:e3:7f:53:1b:35:8c:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:28:62:04:9A:6D:C0:F5:DD:0F:F1:91:02:6C:55:D1:4A:F6:49
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:31:87:99:22:60:35:17:88:3d:45:29:17:13:d9:81:45:
ca:0e:88:c0:0f:16:4b:18:e1:49:19:ac:ea:12:a3:38:ae:c7:
c1:a6:b8:38:e2:52:28:fb:5a:cc:d4:fa:5a:de:40:60:bc:5e:
01:d0:61:37:28:bd:b8:32:c7:b4:bf:a9:83:a2:61:c8:f9:c8:
c7:ed:0c:ae:6d:0b:ef:6b:be:fc:89:ad:a2:03:02:d5:7e:26:
51:33:77:20:e4:01:1a:56:6d:40:67:2d:8f:e2:b9:50:85:2a:
34:f6:66:37:0f:4e:36:2b:72:01:48:8c:30:0f:72:1e:35:96:
eb:42:4e:09:92:37:b4:13:73:68:ba:ff:57:f5:11:2e:60:16:
00:41:f3:4d:55:df:3a:b7:b3:6d:c9:83:0d:84:bb:b8:18:d3:
1b:6d:bd:f3:12:b6:8a:b4:cd:7e:cb:93:7f:05:93:4f:b5:bc:
42:54:0e:4d:99:65:e7:b0:9d:be:0f:b0:f7:94:1d:a4:77:fa:
b3:a2:e1:d7:8d:50:e1:3e:87:7e:27:e9:7a:92:1f:40:e6:a3:
d0:e2:d9:9d:53:82:f1:cc:7c:87:e0:d9:19:de:1e:d2:25:8c:
a9:ec:af:30:e9:7f:36:21:de:fc:b9:25:b3:d7:87:67:7c:25:
7d:c1:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:48 2025 by rpki-client