
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 3Vmj02J+jtMdE/fUsZatuhzHn1oXitwMXUYRwukJl9s=
Subject key identifier: 04:EA:B1:1A:B6:58:4D:A1:A7:3D:B7:BE:FA:AA:E1:A4:93:D9:E9:4D
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019882436223DEEB5054398FE038854F0E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 13DD
Signing time: Thu 07 Aug 2025 02:01:50 +0000
Manifest this update: Thu 07 Aug 2025 02:01:50 +0000
Manifest next update: Fri 08 Aug 2025 02:01:50 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: 4G/RM68D7ILGaXTFUx8uAmDvS0RmoQK6vldYO4JsMAY=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:62:23:de:eb:50:54:39:8f:e0:38:85:4f:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Aug 7 02:01:50 2025 GMT
Not After : Aug 8 02:01:50 2025 GMT
Subject: CN=04eab11ab6584da1a73db7befaaae1a493d9e94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:d3:94:92:a8:a2:40:ef:ed:ec:64:67:60:
10:e6:a7:39:d5:fa:83:88:cf:cc:d1:58:c4:70:0d:
e7:50:2f:7f:9e:30:67:87:03:48:12:d9:e0:5e:86:
2d:54:ea:68:c8:cb:43:76:a0:0e:41:d6:bc:fa:63:
1c:f6:5e:86:3a:93:08:62:64:fb:88:c5:8d:54:cd:
75:ec:71:a7:31:f3:3a:3d:d5:df:12:c8:fd:5c:79:
b4:63:3f:98:6b:15:73:72:02:1e:0e:65:ab:8d:92:
2a:8d:3d:fb:2d:29:55:4f:b3:28:8a:fb:48:7c:aa:
7e:ac:9c:2a:fc:db:d2:3e:4c:00:bb:40:e8:b3:25:
b5:1a:96:9c:a0:0c:7c:a1:e1:21:8b:f4:9b:a1:38:
4f:a1:1d:03:11:05:f2:3b:28:66:2c:d2:d6:8e:73:
65:96:60:f0:c4:c8:d2:63:71:be:a3:5a:58:ac:a6:
76:ab:2f:41:a8:99:fa:27:15:3a:97:30:af:a0:63:
04:b3:a9:7b:e2:6d:0a:58:70:43:6c:e5:94:ca:e5:
b0:1c:8a:04:f1:19:ee:c3:cf:08:84:e9:23:19:13:
fd:4d:ec:41:93:e7:a8:89:76:43:d6:9a:19:2a:ac:
41:7d:3c:94:15:cb:09:ef:17:05:39:2d:85:ae:6a:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:B1:1A:B6:58:4D:A1:A7:3D:B7:BE:FA:AA:E1:A4:93:D9:E9:4D
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:2a:81:8f:0e:e9:5e:a0:e1:ff:ac:51:e6:09:22:55:fe:
53:bf:92:44:cf:ef:a4:a6:3b:b6:39:af:48:41:b7:c1:84:4d:
dc:3e:51:c0:7d:b4:ec:94:2d:26:d5:89:96:20:00:ed:1d:6a:
9e:2b:41:35:f2:18:ae:ab:fb:ba:bc:4f:e1:94:35:49:9c:2e:
00:12:74:bf:e4:11:f3:ec:b2:0b:62:a0:02:e9:d9:e3:01:f6:
81:c3:0f:69:21:dd:db:49:14:a0:ae:95:f5:31:d1:58:97:18:
42:37:ed:bb:2b:08:6f:ce:4e:4d:75:7a:fe:e1:24:ed:0a:7e:
44:68:72:53:5c:94:f0:0b:e3:24:cb:a2:8f:3b:d4:14:f6:ea:
be:04:44:14:c4:51:79:a5:72:d2:e8:0a:bc:43:94:a0:74:01:
de:14:08:3a:29:a8:79:3b:7c:8a:f6:6e:44:44:97:0e:5d:30:
86:46:fe:7f:be:06:b1:7d:3b:52:12:58:2c:3d:e4:8d:ba:22:
b1:2f:d4:03:e3:d8:28:3a:ca:e5:90:e8:5b:f4:f7:83:4b:d4:
72:fa:a8:69:a2:a0:9f:00:10:04:0c:03:bb:b8:de:39:66:5a:
9f:af:d3:c4:68:ff:74:6d:f4:ee:43:80:c0:c3:c6:d4:50:5b:
5f:c0:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:20:48 2025 by rpki-client