Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: xEseYnX9rrvk6N8lyqmV1cHmRfWsyq81rVBDE0IcYMY=
Subject key identifier: 05:E4:67:C3:C7:1A:C1:4F:8F:4B:8B:FE:0E:17:6B:7F:36:45:D8:1E
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 01977CE794AC772A471454FC075E66DE46F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0C2E
Signing time: Tue 17 Jun 2025 08:00:41 +0000
Manifest this update: Tue 17 Jun 2025 08:00:41 +0000
Manifest next update: Wed 18 Jun 2025 08:00:41 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: r4azvZWybdNkaqNm1pXtP/PoLiqIwAGZtZqRKIzVY9I=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:94:ac:77:2a:47:14:54:fc:07:5e:66:de:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jun 17 08:00:41 2025 GMT
Not After : Jun 18 08:00:41 2025 GMT
Subject: CN=05e467c3c71ac14f8f4b8bfe0e176b7f3645d81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:a2:10:34:6f:15:a5:66:94:2f:cc:f0:0c:
00:04:b5:8c:5b:ef:9b:ab:b2:85:fb:58:80:7d:95:
48:17:f0:94:29:6a:42:e3:35:ee:79:b1:de:ca:38:
cd:88:7b:92:23:52:8c:c2:5c:9f:b5:1e:bf:ce:3c:
58:84:75:b6:5c:6c:a1:5c:e7:2b:66:ee:7d:5b:a1:
d6:c1:8f:b2:51:e9:45:31:c4:14:1c:30:2a:7c:89:
1a:9e:7c:d0:15:3c:b3:3b:00:66:13:7b:88:bc:5f:
36:7b:ac:fd:d1:18:8b:2a:38:51:fc:48:fa:7a:64:
1b:01:54:7d:d3:fb:cd:b0:15:cb:91:69:25:4d:f2:
f9:24:29:d1:79:2b:52:c1:b0:e9:e6:1b:a7:10:5d:
70:fd:99:b5:4b:f4:90:a0:b1:70:d1:1a:37:e4:be:
4d:1f:d5:db:75:34:e7:99:36:0d:63:40:73:11:c1:
7c:b9:f2:2a:3e:71:c7:47:f4:06:24:d2:13:76:15:
ab:36:cf:89:66:db:9d:01:d3:00:dd:9d:1f:5e:91:
1c:ae:4f:ab:d2:2b:a2:d6:4f:85:3a:a1:ae:14:36:
fb:fc:49:db:bf:de:65:c9:a0:0a:91:cd:39:85:5d:
c1:11:25:26:36:92:46:70:2f:2a:2e:c3:d7:14:05:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:67:C3:C7:1A:C1:4F:8F:4B:8B:FE:0E:17:6B:7F:36:45:D8:1E
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e1:22:ff:c8:16:e9:89:b2:61:aa:db:3b:71:70:f7:a6:dd:
0d:23:d5:a8:b0:bd:31:eb:a3:86:0d:99:b6:74:3d:d4:04:8d:
1b:08:7b:b4:30:a3:c4:dd:a0:4c:b8:55:a5:58:a6:cf:0b:06:
37:1d:17:ed:a5:1f:ec:ed:57:7c:3c:d9:8b:e2:e8:24:86:b9:
5a:35:23:46:c4:74:8c:b7:91:b7:0b:47:83:84:6b:01:d8:ae:
3f:bc:3e:53:49:76:3d:2e:44:6b:7a:c8:8f:e7:9a:69:a9:a4:
94:63:e2:37:95:8c:e9:d3:c3:6e:0e:f2:1c:9d:84:ba:85:54:
d0:7a:53:a5:d4:44:bb:54:50:59:7e:a6:82:48:7e:b7:dd:ea:
ec:48:7b:b3:0e:8d:d6:e8:cb:80:da:f0:66:9e:8e:da:e0:1b:
d7:f6:ef:d0:d7:ca:d7:51:90:db:ef:df:67:14:dd:58:f2:11:
cf:89:20:64:c7:ef:ff:6f:aa:0d:67:f2:4d:83:62:fe:bf:30:
95:ce:3e:3a:23:a1:03:0d:2d:ea:d2:05:40:9f:5b:35:83:d5:
e5:5d:5b:ea:a0:12:d6:94:41:5b:57:16:9f:4a:ce:8f:b6:f0:
8f:21:4a:7b:7c:f9:4d:f2:ca:03:4e:7a:ca:e1:e2:b0:29:34:
8f:81:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:49:30 2025 by rpki-client