Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: ZvJ6oyaVOKSQ4sKJWkOrTW+IxQinpUJT+Qq4PJ8OHU4=
Subject key identifier: B5:3C:D4:67:21:2C:55:59:FF:8A:A5:4D:A8:AD:35:53:E7:59:78:36
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 01977ED5AB3880A7A982B8A37FDBEFFEE90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 17:00:21 +0000
Manifest this update: Tue 17 Jun 2025 17:00:21 +0000
Manifest next update: Wed 18 Jun 2025 17:00:21 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: zva5UWtv8+XdN4xJ/25B/DTPHzW8q/pZylcDN1h5k+Q=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:ab:38:80:a7:a9:82:b8:a3:7f:db:ef:fe:e9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jun 17 17:00:21 2025 GMT
Not After : Jun 18 17:00:21 2025 GMT
Subject: CN=b53cd467212c5559ff8aa54da8ad3553e7597836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:eb:e6:5d:b1:fa:e1:3f:a3:30:77:d4:24:
e2:60:eb:6f:6b:ea:d1:e3:1c:44:bd:71:4f:5f:b1:
79:b6:b0:08:93:56:4a:ad:a7:8d:34:1b:b9:85:2c:
20:51:f8:1f:e1:a1:71:c4:9d:5f:ab:a1:62:bf:db:
58:a1:48:12:04:e0:77:73:2c:4c:d5:ed:90:8e:17:
07:c4:4d:66:30:bc:0b:85:be:ef:6d:7d:38:1c:bd:
63:9f:d1:45:e1:f5:26:13:38:42:89:43:34:2d:59:
c3:9d:29:13:a5:bd:66:75:b1:d3:d5:46:10:18:e6:
85:9a:17:7b:8e:98:1c:73:17:b8:f9:3e:1a:16:fd:
62:5a:bf:82:c8:7a:76:fb:dc:f2:fe:c8:da:cf:3a:
56:4a:b6:ef:e1:86:64:7f:fe:fa:e7:30:b4:1c:19:
7a:fa:6c:5a:c6:01:57:ff:d0:8d:3a:6c:3f:6b:62:
f6:23:28:02:e5:83:a1:dc:e0:d6:82:d9:97:e5:bf:
56:db:04:17:e3:eb:c1:04:e6:f1:73:1c:84:a1:aa:
98:44:90:fa:2c:38:db:52:0f:c2:89:b3:68:60:ed:
b3:53:f2:9f:53:fa:cc:e6:87:6c:03:7b:a7:72:75:
52:71:9b:20:3b:e8:af:da:25:0e:b3:0c:37:0b:7c:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:D4:67:21:2C:55:59:FF:8A:A5:4D:A8:AD:35:53:E7:59:78:36
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:81:f7:c9:69:ff:63:fb:35:3e:88:c2:69:a9:c3:8f:25:d9:
96:3c:a4:d1:06:74:97:90:4c:be:64:63:11:fd:2d:f5:0f:d0:
0f:87:de:af:54:3c:16:ec:59:08:ff:be:7c:8d:20:29:d5:23:
a0:a4:97:e6:a6:a6:02:af:41:9d:6d:2d:69:66:ef:d4:c2:fc:
bb:69:96:53:21:15:f0:40:82:4b:a0:74:8e:fa:e3:4c:90:7d:
0b:7c:9f:17:01:96:2b:9e:d5:9b:47:ca:19:3f:0d:14:99:f1:
36:b0:a9:4b:4a:38:e9:41:91:5f:eb:00:4c:09:12:99:e7:43:
74:9e:a6:01:7a:12:48:08:ea:4b:3c:fb:8b:b8:95:62:9e:11:
09:4a:a4:43:c2:c4:cf:2e:ea:42:10:ce:56:96:99:3c:8d:6f:
ef:4d:39:dd:e7:a2:79:ee:25:31:10:d1:43:88:b9:c0:f2:1c:
68:19:a1:6a:de:75:ea:bb:ad:4d:a9:9a:d9:51:b7:28:33:7e:
b5:cb:d8:b4:28:e9:c4:e0:74:ab:37:a1:e8:8b:eb:1d:c4:b4:
04:8f:26:33:fd:44:6d:69:0a:be:85:a5:55:0d:a7:cc:38:03:
05:dd:fd:b2:4d:6d:8f:6d:a1:1b:5e:ca:6f:c6:86:26:4d:66:
01:50:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:24:53 2025 by rpki-client