Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier: XPOvREHYpcaAie43SDPctEMiLc4ULn+g3m10bWvPqIU=
Subject key identifier: 30:2C:AF:54:C5:B5:76:FD:82:C7:E7:79:93:8D:7B:7C:61:98:DF:92
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 01988A6981FBD46B421DA48C1EC52A2848CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number: 0AF0
Signing time: Fri 08 Aug 2025 16:00:26 +0000
Manifest this update: Fri 08 Aug 2025 16:00:26 +0000
Manifest next update: Sat 09 Aug 2025 16:00:26 +0000
Files and hashes: 1: F3oEv0QBT7ejRZnF2aTKoyEK5cI.roa (hash: MTTLBQPL1aOScQOGtAiCwXpSCEzlrz60TWKC9wTFgO4=)
2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: HhMr+nCYLuWwT8mRDJ3lgjYW1Ir/P7ubC0OUl6lJHtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:81:fb:d4:6b:42:1d:a4:8c:1e:c5:2a:28:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Aug 8 16:00:26 2025 GMT
Not After : Aug 9 16:00:26 2025 GMT
Subject: CN=302caf54c5b576fd82c7e779938d7b7c6198df92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:5f:59:40:d0:89:2f:7e:a5:2e:fa:77:8a:
b8:c3:e4:a9:c3:e9:29:e9:c8:bb:26:d4:e6:c3:ae:
c5:e5:ff:cd:a2:12:81:1c:b2:63:9d:1b:f5:89:b9:
f3:dc:26:f7:95:8e:1e:f9:82:f5:d4:d9:a7:a5:45:
65:e7:e0:7e:fb:46:ea:ba:ca:6b:90:1d:8a:7b:e2:
95:a4:f6:6c:e9:f0:68:40:0f:db:bc:0a:cb:60:a9:
8b:b3:b7:8d:5f:ab:1e:55:18:76:7a:05:5a:66:84:
9c:23:44:12:0a:a1:66:e1:e8:f1:69:f4:d7:92:af:
67:2a:3e:66:5a:7a:e0:d3:98:ba:cd:48:b5:0c:4c:
6b:77:b6:9a:7f:50:94:45:b0:27:55:90:74:df:c5:
90:2e:d4:47:a0:e8:8d:e9:82:82:0d:98:1c:89:a8:
19:61:b6:3e:51:b4:9b:33:33:9d:15:97:a2:8c:a2:
80:76:7c:66:00:95:06:77:3d:8e:0f:a9:86:67:8f:
52:fa:7b:93:a6:86:ca:0d:22:3d:53:84:f3:ae:40:
9e:80:b6:d3:1b:43:cd:a4:10:fb:8e:e2:e1:05:2f:
4e:28:44:29:40:96:de:60:69:63:da:81:49:bd:91:
76:87:53:77:0a:b5:8c:30:07:6c:13:34:61:8f:33:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:AF:54:C5:B5:76:FD:82:C7:E7:79:93:8D:7B:7C:61:98:DF:92
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:91:28:83:f1:1f:44:07:24:e3:15:29:88:d9:29:62:d4:
6f:a4:7d:10:ac:73:39:0d:0f:77:43:94:d6:f2:51:d7:26:ba:
5e:73:e9:7f:9c:ba:be:95:b6:b8:c5:c8:81:62:2c:de:d0:c9:
31:db:a9:ec:ce:f7:6d:90:e9:5d:33:9a:e9:44:d7:d4:e3:19:
66:cd:4b:ec:fc:0a:82:7f:ce:89:57:f6:80:4b:6e:ea:f1:51:
c4:bb:9a:69:d4:9f:e5:5e:97:39:b1:5d:01:1f:ec:fc:1a:a4:
d3:74:29:f4:aa:ae:b7:ab:e9:f7:c7:1a:74:5b:e6:f9:57:db:
cf:cb:4e:61:6d:73:cf:fd:65:2d:0a:1f:b2:d1:62:5e:93:b7:
64:b5:36:75:e7:df:dc:da:01:2a:aa:8e:63:11:26:b6:4f:46:
04:3f:a3:d7:e1:6e:6b:03:1d:10:fe:5e:c2:c6:5c:6d:94:1e:
c3:2b:f8:0a:e5:31:99:47:a8:52:5f:60:dd:9d:f1:8b:af:e3:
9d:4a:9c:97:f5:77:4c:22:38:b2:9a:cb:4e:22:a4:e0:09:6a:
4a:f4:26:ea:a8:08:07:b0:c9:e2:c4:58:4a:dd:47:d8:de:98:
f0:f9:77:5d:37:d0:b4:1e:cd:52:82:ae:41:57:49:26:4b:01:
1c:5b:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:48 2025 by rpki-client