Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: FNY1+R4gjImkebEPrMh2ZstCph0qKiOY9KAeEXWV4Ug=
Subject key identifier: A5:69:79:CA:B9:53:3C:7D:DC:D4:45:25:46:F6:81:DF:41:3D:6F:50
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01988A6A4F13A29A07D4405284B6E909CED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:01:19 +0000
Manifest this update: Fri 08 Aug 2025 16:01:19 +0000
Manifest next update: Sat 09 Aug 2025 16:01:19 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: KjbPNtTQdmArTEdiSW9XEoggf3YQYYM042ascOJJms4=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:4f:13:a2:9a:07:d4:40:52:84:b6:e9:09:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Aug 8 16:01:19 2025 GMT
Not After : Aug 9 16:01:19 2025 GMT
Subject: CN=a56979cab9533c7ddcd4452546f681df413d6f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:83:66:47:92:18:36:10:ec:e1:75:fc:d3:
02:89:8a:fb:70:4d:d4:f2:97:23:8c:d5:2b:64:08:
da:8f:8b:e4:00:9e:63:28:c4:c1:a9:6d:fa:02:59:
1e:79:c5:f9:80:3e:33:71:88:17:22:97:18:93:84:
87:fe:af:02:f2:ca:de:7b:5e:3d:5b:72:bd:9f:ab:
82:06:62:1a:d1:e0:86:a4:3b:9d:0b:9f:00:b8:3b:
17:b4:df:54:08:eb:0c:7c:0f:78:66:73:d8:d3:ef:
d6:03:41:88:9b:34:ee:97:4a:1c:57:05:30:77:31:
06:1c:fa:78:77:db:ab:6f:19:46:44:c9:8d:0f:89:
2e:ae:0d:7b:00:be:ce:bc:97:ab:91:cd:45:82:35:
17:93:50:44:8a:63:9a:50:37:65:47:00:2f:6c:21:
de:93:a5:eb:f9:d9:41:c9:27:aa:64:29:8b:65:a6:
9a:98:60:d5:6d:64:ae:6d:e9:a2:21:3f:50:f3:da:
de:38:03:4b:26:55:dc:32:e9:e2:ef:02:c8:9a:19:
3a:bf:f3:5b:2b:7c:76:ee:16:cf:2d:db:f6:01:e6:
a0:71:a1:57:6d:d7:43:56:73:44:c0:f8:84:45:8e:
42:a2:51:92:d2:fb:3b:b1:4b:60:26:60:f1:e2:2f:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:79:CA:B9:53:3C:7D:DC:D4:45:25:46:F6:81:DF:41:3D:6F:50
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:19:9d:4e:af:6a:6d:b8:e8:02:bf:b4:84:2a:9a:0a:18:
f9:64:d3:aa:a0:d9:10:8b:6a:f4:81:d2:74:0c:43:98:3f:ac:
72:c2:0a:7f:91:3b:ae:17:9b:22:90:a4:9a:df:f5:13:a6:ae:
17:3f:ac:65:91:97:dc:f0:cb:18:83:cc:9b:e2:83:14:c7:dd:
ba:d2:54:96:e4:35:03:0e:dd:be:c6:60:3e:1c:c6:68:f7:cd:
70:dc:66:09:11:c3:23:15:8f:55:bd:74:a0:ca:24:b9:0f:32:
d1:ab:f3:b7:a5:ed:c6:45:8d:0e:ae:47:cf:d1:83:fa:50:19:
f9:b1:3e:0b:bc:09:c3:98:8f:72:0d:18:f6:93:2a:3a:75:ea:
99:6a:86:e2:b6:76:61:e3:ff:74:07:b2:dc:d1:a9:6e:f2:76:
a7:ea:f8:91:07:bb:77:4b:fb:e9:4d:99:df:8b:a3:20:47:3b:
6e:29:40:34:68:c7:74:2c:b2:73:7c:aa:59:b0:0c:8e:4e:0d:
58:7d:05:0e:12:3c:8b:45:5b:8b:60:16:3e:f3:e4:f1:99:1a:
fb:bd:14:12:e4:ad:cc:3d:c1:32:94:4b:3a:16:44:c4:69:44:
22:3e:f0:47:b7:6b:30:25:c2:19:41:de:29:e6:f8:0c:d2:57:
1e:60:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:37 2025 by rpki-client