Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: 3NY8q4YsidT3NZdxhic3ez3ATL2nESs+13d3eWB/1o4=
Subject key identifier: 98:CE:1F:5C:24:3F:36:2B:3A:B7:45:61:9D:E0:D2:5D:18:6C:8F:88
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 01987BD230CD9AE1E77351B941B5921AA60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 20:00:29 +0000
Manifest this update: Tue 05 Aug 2025 20:00:29 +0000
Manifest next update: Wed 06 Aug 2025 20:00:29 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: 95XiSfmvcnYB6HwDPBPtrAD8yjNXP50rQAjm0wfIFw4=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:30:cd:9a:e1:e7:73:51:b9:41:b5:92:1a:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Aug 5 20:00:29 2025 GMT
Not After : Aug 6 20:00:29 2025 GMT
Subject: CN=98ce1f5c243f362b3ab745619de0d25d186c8f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:24:20:59:dd:62:4a:ea:86:be:fe:d9:42:
52:d2:e6:8c:02:e9:81:c3:d6:51:63:03:da:f6:9b:
72:fd:15:99:be:57:57:cf:f0:89:0d:42:21:23:c4:
a7:91:8f:f1:df:c2:c3:f4:da:9d:ed:20:75:8d:9a:
74:8c:d4:1a:52:94:4c:63:bc:1c:ab:82:a0:48:72:
f9:c2:4c:1e:68:72:28:1f:13:d5:75:83:ed:dd:e2:
7f:0a:75:8e:33:ad:4a:14:62:ee:41:ef:fd:1b:6f:
d7:ab:6a:b4:e5:2a:0d:ef:57:90:cf:b2:9e:69:a8:
8f:2a:10:0e:9b:b4:f3:05:1b:e6:ec:e5:da:49:4d:
67:da:bd:62:fb:36:0d:30:66:e0:39:5b:e4:9f:ca:
25:93:0f:44:dd:dc:09:58:31:8c:cf:03:c3:27:fb:
0e:ac:e4:b6:c8:53:fe:53:e7:74:6f:94:cc:41:97:
4a:b6:93:a0:71:72:bb:92:83:23:e2:e4:c1:5c:02:
f7:f5:49:f7:59:6b:f6:97:72:29:b0:f5:df:ee:bb:
7e:6b:bd:1f:02:74:d0:ef:75:a9:1d:34:e6:b1:8b:
c5:7f:4d:1a:0c:0e:91:77:d2:88:7d:64:c3:93:b4:
27:43:d4:71:69:8c:b6:57:2f:aa:63:6f:c6:3c:cb:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:1F:5C:24:3F:36:2B:3A:B7:45:61:9D:E0:D2:5D:18:6C:8F:88
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8b:d7:cc:09:d9:22:ba:fe:2e:ae:1c:e6:a7:3b:4b:45:1b:
b8:ed:78:92:d4:a6:fa:2e:c8:75:b1:ca:9d:e2:ad:b6:16:d3:
da:6c:ec:b0:b1:86:71:0e:02:ac:50:1e:84:9e:00:9e:be:11:
fc:b0:50:3e:d0:96:41:db:bf:50:e3:61:1b:7c:47:79:bb:0e:
8a:84:fe:74:fc:cd:c0:06:58:66:62:43:66:4d:c2:16:20:33:
06:4f:b7:e5:1e:0d:40:d2:02:26:34:67:fd:60:bb:15:15:85:
e8:ae:9a:b5:0e:f4:27:6d:1e:2c:69:9d:9f:8f:90:8b:10:74:
94:87:4d:04:87:08:d3:f9:b7:e0:6b:58:e5:ba:ff:32:33:04:
4b:1e:0d:22:a7:cd:13:ee:b8:8b:d4:b5:77:38:8c:20:25:e0:
37:01:f6:3b:d9:8e:bd:05:6d:02:26:58:20:33:2e:37:30:af:
13:5a:ce:2e:9f:65:b1:c8:86:ec:b2:d6:ae:53:e4:65:56:6c:
7d:59:a8:1a:f8:00:ee:88:5c:14:13:c7:59:3e:6b:09:6e:14:
c3:4a:50:92:dd:48:b6:3e:0f:84:8a:c6:d3:16:5a:b7:89:9c:
2a:c1:f9:e1:d5:4a:e9:85:03:eb:3d:f7:aa:a3:ed:95:fc:bc:
e2:d5:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:54:48 2025 by rpki-client