Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: fzOQbelYaXoC0Dlk82scKytoyNWiIaT0cOMjcTvtJMU=
Subject key identifier: 7C:75:A1:FC:BC:51:FA:2E:7C:9F:EB:F6:E3:3B:7F:11:87:A4:65:DD
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0198820C0C8E144ED9E615D9FC9A9DA72807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 162E
Signing time: Thu 07 Aug 2025 01:01:24 +0000
Manifest this update: Thu 07 Aug 2025 01:01:24 +0000
Manifest next update: Fri 08 Aug 2025 01:01:24 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: Gc6fLwoO4cL6JjvNbogbejYAHeSDiilByhaYjbuhtRE=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:0c:8e:14:4e:d9:e6:15:d9:fc:9a:9d:a7:28:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Aug 7 01:01:24 2025 GMT
Not After : Aug 8 01:01:24 2025 GMT
Subject: CN=7c75a1fcbc51fa2e7c9febf6e33b7f1187a465dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:7b:d2:0e:a7:f2:24:4b:cb:f5:e7:fb:da:
11:00:a8:53:bf:c8:08:d0:0b:55:06:32:26:03:a2:
23:21:4a:78:c3:25:46:e9:55:fa:85:0f:f6:26:60:
08:a4:fd:65:90:f7:d9:f1:c8:76:4f:b6:a3:87:77:
04:f4:4c:92:fa:45:14:24:48:d1:7b:b8:c9:cd:ac:
4d:72:11:06:79:36:97:88:60:9a:0c:f6:db:e9:49:
0f:dc:d0:3c:72:16:c5:2c:4c:37:04:c1:37:74:4a:
8d:4e:b9:da:36:27:0d:33:79:7b:65:24:c4:89:45:
21:2a:6c:1c:99:26:46:80:4f:87:28:da:e5:df:2a:
60:12:8e:8d:f3:38:20:21:1a:14:c7:58:0f:eb:ac:
6d:62:a7:94:26:fb:3c:76:84:d0:48:6b:af:a3:06:
f2:7c:5d:a8:2c:72:44:3f:cd:cf:c5:7c:47:dc:96:
fd:8e:96:98:49:de:f2:39:33:c3:20:4e:ef:77:32:
77:1f:67:38:17:da:82:33:99:6f:16:53:f1:bd:a2:
13:cf:d9:a2:83:5b:77:7d:9d:b6:34:76:56:a6:c0:
a5:b3:18:21:df:e9:af:27:7e:80:1c:11:37:96:3c:
42:5f:70:be:2d:7b:1c:fd:60:ad:e3:42:d5:3c:b2:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:A1:FC:BC:51:FA:2E:7C:9F:EB:F6:E3:3B:7F:11:87:A4:65:DD
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:66:ba:85:9e:da:62:04:ae:56:25:b0:89:0b:d9:ac:11:
a5:c2:ca:ac:c2:51:99:75:3d:fd:69:d7:96:8d:6b:01:bf:ff:
dd:2d:75:8a:23:3d:12:c9:84:28:b9:ed:f8:21:b5:b8:78:6b:
2a:2d:fd:bc:bd:43:80:a4:19:83:5e:dc:08:e8:33:54:73:7c:
90:c5:2c:47:97:e3:79:3c:d0:bb:3f:73:eb:19:6e:a1:9e:5b:
6e:a2:a3:79:d6:58:0a:09:93:4c:23:c9:15:e2:6f:94:2d:88:
35:a6:bb:b1:4d:e9:8e:fe:f8:6e:30:30:7c:00:cb:3e:83:4e:
92:04:97:b9:16:2c:14:6f:b3:ca:19:a2:5c:1d:12:3b:9e:7e:
5b:67:74:da:24:dd:89:aa:13:1a:74:49:b3:be:91:13:dc:4e:
7e:f2:04:0b:46:81:92:71:cf:c3:56:6c:42:36:dd:c6:30:88:
66:d8:a3:bd:c3:e3:de:73:64:07:13:2f:20:79:98:86:b3:ac:
38:b0:38:d0:fc:1c:30:6d:f1:68:a3:3c:e9:a7:2a:f4:ab:28:
18:04:fc:d4:3e:91:6e:a3:aa:ef:24:ba:e3:6f:44:93:e6:43:
06:1f:81:63:6f:6d:8b:0f:9f:8f:88:6e:76:13:1d:a4:cf:9a:
8e:0f:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:12:50 2025 by rpki-client