Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: pkcFQwXo7vbmwxw3cphpiqKhe9BWYziglwH+fVkC9MA=
Subject key identifier: E6:A2:15:5B:0A:F4:4E:B4:B5:7C:12:A2:E5:C2:EC:60:7A:A4:C6:FA
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01988AA07598E9C68CE47D976A24A18A2A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0864
Signing time: Fri 08 Aug 2025 17:00:28 +0000
Manifest this update: Fri 08 Aug 2025 17:00:28 +0000
Manifest next update: Sat 09 Aug 2025 17:00:28 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: PzIwD5CiTvj1utyZiEdrRgRbRGJ0S31pGXj6dKBJhGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:75:98:e9:c6:8c:e4:7d:97:6a:24:a1:8a:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Aug 8 17:00:28 2025 GMT
Not After : Aug 9 17:00:28 2025 GMT
Subject: CN=e6a2155b0af44eb4b57c12a2e5c2ec607aa4c6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:6f:df:e2:dc:a6:f4:08:1e:7b:62:0c:d5:
9a:b8:aa:7e:7b:58:6c:d2:d8:c8:54:f7:af:9a:fc:
b4:15:c2:91:83:1c:69:14:4a:61:93:8a:6f:2c:51:
e0:c0:fe:e2:01:10:36:fd:fa:20:06:00:24:18:20:
ca:59:35:98:7c:48:cf:31:d2:3d:19:82:c4:0e:d9:
8c:dc:ee:fc:ce:70:e8:79:d7:6d:06:37:d2:59:46:
46:a6:4e:cb:28:66:0e:7b:07:d5:54:8d:c9:10:6d:
e4:46:9b:e1:9a:69:9d:9c:b1:b7:23:8c:bb:db:ae:
8f:11:02:7c:b8:53:4b:15:a7:ab:81:16:14:22:b6:
13:f8:e8:f4:fb:d5:36:36:19:8f:17:74:a2:b1:14:
26:1f:cf:11:a2:fe:fc:39:b5:07:c2:61:65:d0:71:
8c:f9:29:61:84:4c:30:36:04:2b:14:d0:cd:bc:de:
67:1e:2f:c5:05:aa:94:cc:d6:eb:e6:ee:22:a7:b6:
2a:aa:ed:10:45:4f:99:88:3d:ec:03:cd:51:01:bb:
b0:96:5a:5e:50:2a:ef:97:ba:bd:04:0c:29:a9:d6:
a2:82:54:f3:ac:39:64:f3:3a:4a:a5:29:d4:72:79:
87:e1:07:a8:a7:f2:b3:cf:7e:84:37:e9:da:ce:d6:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:15:5B:0A:F4:4E:B4:B5:7C:12:A2:E5:C2:EC:60:7A:A4:C6:FA
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:3a:85:82:35:8e:91:9b:d7:c2:bd:28:32:52:36:16:b2:
2f:99:76:ce:72:66:33:47:7f:4c:13:63:0f:84:e4:0f:01:31:
48:a3:43:a3:7a:f6:8f:b9:c8:db:d4:cd:43:c4:53:13:e2:5a:
cd:18:93:71:fb:cd:8a:d7:c4:9f:05:9d:2a:83:86:12:44:4f:
72:be:01:e4:a6:bc:0f:33:5c:11:74:79:f9:b1:aa:ce:a6:50:
25:d1:2a:0a:e2:2f:b6:8e:65:b7:d1:c3:a9:0a:06:fd:8c:4a:
dc:bf:13:b7:8e:c0:28:30:12:36:39:a1:38:ba:33:67:b2:74:
9b:66:d1:b4:b1:a5:aa:c5:bd:b3:a5:35:16:5e:98:36:73:cf:
a7:01:3c:c7:46:31:9e:a7:5d:2d:fb:95:13:01:2e:3b:41:d0:
de:87:56:a8:c5:0b:4d:0f:fa:4c:45:f9:2b:af:92:ea:39:0d:
11:a7:d5:9a:62:72:11:98:f6:04:87:8f:35:4c:7d:7f:bd:46:
5f:1f:4e:09:52:df:68:38:db:9f:ee:d3:16:1b:72:ad:b4:c6:
75:46:cf:a3:86:df:55:c7:c5:cf:40:b3:53:0a:fd:a9:08:73:
ba:5d:fc:35:4d:e4:3d:e8:97:4d:97:19:24:b8:ae:80:45:c6:
c5:ac:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:44 2025 by rpki-client