Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: eU3ZkF9dboFrUmjXXMt/A4w8iPzZI8f9wXX67Ie/YUI=
Subject key identifier: 99:9E:17:DF:FB:25:FC:D8:57:87:BE:42:D8:68:77:69:29:CF:1F:84
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01977C42DA3357113EE076F57F2A4FFDB050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 07D8
Signing time: Tue 17 Jun 2025 05:00:45 +0000
Manifest this update: Tue 17 Jun 2025 05:00:45 +0000
Manifest next update: Wed 18 Jun 2025 05:00:45 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: eCYElfA6Lj/CneN4QjviaF7uGaQk795qVABKMoMr2ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:da:33:57:11:3e:e0:76:f5:7f:2a:4f:fd:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jun 17 05:00:45 2025 GMT
Not After : Jun 18 05:00:45 2025 GMT
Subject: CN=999e17dffb25fcd85787be42d868776929cf1f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:12:43:6b:7c:72:81:90:f6:35:42:5b:f6:ac:
33:16:34:3f:56:d6:88:4e:f2:61:60:d0:78:81:ed:
95:d2:47:02:1d:4b:5c:1b:be:8e:1a:0c:67:69:94:
89:52:62:b1:96:21:93:9c:4b:a7:e2:ac:cb:7f:74:
4c:de:02:32:29:4a:49:68:e9:9e:9e:3a:b1:8c:ed:
86:0c:e6:63:7c:06:6f:b6:a9:01:ab:99:b8:b4:9f:
a6:65:94:cf:75:e3:6c:92:88:12:20:02:2f:96:7d:
da:42:cd:59:7e:4b:2c:a5:00:14:f3:e6:4c:ea:f6:
1e:4e:7e:be:a8:37:b8:84:14:0d:e6:7e:60:d5:99:
a9:c8:58:fe:57:d7:3a:96:31:cc:d7:ab:aa:75:07:
08:28:18:28:27:d3:a2:d6:58:89:a0:ce:34:99:ca:
6a:b8:de:88:8c:28:5a:1a:c0:bd:08:4a:9f:5b:95:
1b:2f:7d:e4:fc:12:a0:ac:4f:08:f6:e5:85:93:15:
4a:17:54:70:c0:9e:5f:e4:4e:e6:e0:07:7e:79:ff:
97:be:38:29:c2:0b:2b:fb:c1:b8:8e:0b:28:ea:e7:
f6:a5:ae:2c:35:74:ce:5e:56:9d:c2:9a:e5:f4:39:
7e:7f:35:42:8b:a3:f5:21:ac:17:0a:81:da:00:ac:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:17:DF:FB:25:FC:D8:57:87:BE:42:D8:68:77:69:29:CF:1F:84
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:db:6d:53:75:50:5a:a1:b5:18:a4:3a:c3:ff:f4:43:a5:
95:d8:78:4f:c0:3c:e1:b7:01:6a:d4:66:b7:d5:50:ab:4a:cd:
0f:fb:31:91:2b:83:4b:d9:73:be:58:9a:4e:6c:72:27:47:24:
d1:f4:da:0f:66:67:c3:a6:f1:7e:fa:2c:c9:b8:3f:df:d0:bc:
d6:92:bc:1f:57:59:bd:4f:5a:f2:41:63:bc:75:d8:94:08:aa:
41:47:0e:22:7c:8c:99:4e:6c:6e:6d:09:22:33:11:e6:19:77:
f5:15:36:a3:b1:01:6a:e1:48:7f:8d:62:f0:c0:7a:40:4c:60:
8b:83:5c:d5:61:90:bc:03:5b:9b:c1:05:b6:2f:84:6e:07:28:
f8:31:63:24:bd:58:b2:07:f3:bc:11:5f:12:7b:bb:e4:e0:e9:
d7:d0:86:38:5f:c4:8c:f3:c1:c8:c9:02:a9:2b:c3:fb:54:1d:
68:94:a7:96:78:ee:d0:59:3a:70:5b:1c:c6:46:d1:11:f7:83:
78:f0:ff:99:c1:44:42:1a:a9:b5:0a:c2:3b:f6:55:69:8f:60:
7c:02:fa:29:9c:6f:12:dc:e7:ae:c0:d4:ba:45:4e:40:93:62:
34:98:f4:68:2d:8e:dc:8c:b1:5c:9b:3d:fa:fb:a4:93:92:d5:
0e:3d:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:59:01 2025 by rpki-client