Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: fZTP7v/5URZbdnTMPP7ULkYU+QP9sOND5TEdqCoXARs=
Subject key identifier: 15:28:B2:EA:E0:65:FA:DB:3E:6B:06:CC:E1:0A:61:FC:50:07:F0:B7
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 01987306B1642E5B2700E7EC1592996ECF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 04DB
Signing time: Mon 04 Aug 2025 03:01:15 +0000
Manifest this update: Mon 04 Aug 2025 03:01:15 +0000
Manifest next update: Tue 05 Aug 2025 03:01:15 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: 6o/PvJ/sgoPKiWozaoCUUY0/yPlQaTB+6YeHBDPuDmA=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:b1:64:2e:5b:27:00:e7:ec:15:92:99:6e:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Aug 4 03:01:15 2025 GMT
Not After : Aug 5 03:01:15 2025 GMT
Subject: CN=1528b2eae065fadb3e6b06cce10a61fc5007f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:d6:40:69:e6:62:48:83:f8:12:e5:8c:26:
19:f5:b1:6c:ec:73:c2:1d:a8:fc:72:d0:68:dc:5a:
05:d5:a3:2b:5d:73:66:ea:1e:03:55:ce:61:e5:87:
d9:e3:49:93:76:ed:0b:7f:9b:4e:65:bc:cb:6f:a9:
08:84:e3:8a:37:e8:33:f9:20:3d:64:86:8e:d1:cd:
8d:79:4f:fc:a5:5e:2f:bc:81:97:26:78:fd:58:39:
4a:6b:2f:91:7a:6f:f6:9e:e9:8e:13:ff:b1:f3:82:
e0:58:02:cc:dd:50:0b:8f:ba:cc:93:40:85:fe:65:
fb:2f:23:0b:26:14:e0:33:e8:18:96:d5:a8:43:23:
e9:de:0e:cd:bc:4e:8e:ee:97:16:49:a0:64:a2:56:
8c:6c:35:73:f8:6f:ab:6b:10:66:10:c8:1b:96:e5:
dd:c6:ba:14:d8:dc:6c:a3:4a:94:c1:0f:43:7d:10:
b9:ba:88:7d:80:7d:c0:a9:2e:7b:55:05:b6:b3:9b:
27:39:52:fe:9d:c1:91:d4:0a:a7:80:e2:ee:64:f7:
74:55:2e:80:b2:c0:c6:15:4f:3b:81:9b:50:0f:fc:
a6:cc:7e:72:77:0f:e4:19:06:dd:d6:36:0d:4f:c1:
02:9b:14:af:d8:4b:e2:a9:03:93:aa:a3:f0:14:d9:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:B2:EA:E0:65:FA:DB:3E:6B:06:CC:E1:0A:61:FC:50:07:F0:B7
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:71:6d:4a:48:26:f6:96:19:99:1d:af:00:bf:32:2e:d8:
f0:2d:75:60:1b:1f:80:ba:ea:6e:56:22:5b:69:4e:a8:f4:e2:
ab:d4:66:8f:8f:ad:b6:69:72:76:63:0e:f2:16:4d:91:9a:a1:
00:cb:75:a8:66:b5:b3:ea:0f:14:e4:cd:e5:21:14:fc:e1:c7:
6d:18:b5:16:66:9f:9e:6a:20:3f:99:a0:cd:73:c7:10:c9:4d:
e9:3b:4e:9a:d7:dc:79:37:00:51:34:dd:c1:9a:1b:45:39:1a:
7b:0b:f8:fa:ec:1c:03:a9:ac:73:d2:0d:9f:47:c0:b7:78:52:
c1:a9:da:24:b2:43:21:b1:23:c0:6e:ad:8b:50:b1:a1:b5:57:
83:23:bf:a3:ee:b5:e5:76:c1:91:29:0e:ff:3a:a0:f2:2c:4b:
55:94:e8:8e:58:97:2a:13:26:ce:41:35:b2:db:0a:ff:d3:d9:
9d:66:a5:cd:2a:f3:41:f4:08:18:b2:a3:3a:98:2b:37:fd:28:
4c:39:ad:c3:d9:51:8f:0d:df:18:98:65:ae:cd:94:92:34:3e:
46:6d:79:09:8f:b8:bf:eb:ad:03:72:f9:a7:f9:08:c2:cd:a5:
ad:6f:15:a2:2a:fe:3b:50:7f:f3:cd:65:8c:fb:0f:12:cb:ac:
24:e5:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:07 2025 by rpki-client