Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: 5ubGLrs2AagDKVZWznZtcEnWlQFLN7YZOg3Gcxwrre4=
Subject key identifier: 17:67:9A:12:CE:4F:77:F6:6F:18:10:41:4E:D7:08:16:E5:13:34:CF
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 01987E6681797F7A533ED7CA239CAF4B286C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 057F
Signing time: Wed 06 Aug 2025 08:01:43 +0000
Manifest this update: Wed 06 Aug 2025 08:01:43 +0000
Manifest next update: Thu 07 Aug 2025 08:01:43 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: oV6XCoLVV+bL8LimECN+7cvMMG78BtvekSL+cmjRphA=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:81:79:7f:7a:53:3e:d7:ca:23:9c:af:4b:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Aug 6 08:01:43 2025 GMT
Not After : Aug 7 08:01:43 2025 GMT
Subject: CN=17679a12ce4f77f66f1810414ed70816e51334cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:c8:db:09:4b:69:80:72:f1:2e:24:08:e3:
db:65:b3:77:ad:5d:1d:12:fd:25:ba:d1:8b:34:85:
a3:31:07:27:45:70:d3:5c:9e:26:c5:3a:d1:90:b3:
da:4b:8f:0a:c4:5e:c0:64:8c:8a:9e:9b:e3:57:e6:
02:e1:99:0b:b3:ac:a4:e3:1f:86:35:93:1f:10:eb:
d4:8d:4e:0e:e8:8b:a3:17:92:3f:27:be:da:41:69:
59:4f:76:04:0d:97:a0:33:28:13:81:ee:c3:68:18:
23:76:aa:f5:c3:7b:cb:92:da:5e:f8:ae:d1:96:54:
74:29:49:89:c8:71:9b:98:6e:e5:86:cc:ab:55:5f:
79:19:da:e1:9a:de:f8:09:c1:59:8d:ec:4e:6b:2c:
cd:46:47:93:89:fd:9f:cc:dd:7a:86:cc:95:93:39:
dd:9b:c0:cd:d8:45:a3:81:a1:a1:76:3e:d7:33:1b:
22:ff:a0:61:eb:f5:9c:94:ed:90:10:70:56:d2:b0:
43:83:67:e2:2f:b9:10:60:3a:ce:2e:75:c1:7e:b7:
e8:0f:3b:fd:c5:54:82:25:5f:c2:1b:81:01:aa:c1:
8b:b3:25:27:6b:e5:01:20:05:c5:e5:fe:16:c1:05:
e9:93:57:7c:83:dd:58:d6:df:50:99:4d:03:02:de:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:9A:12:CE:4F:77:F6:6F:18:10:41:4E:D7:08:16:E5:13:34:CF
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b7:78:28:e3:31:84:83:9f:b6:a6:f2:fa:df:b6:f5:c4:39:
22:fd:af:c0:16:48:57:28:4c:6c:f0:40:1a:5a:27:08:57:c0:
9c:d3:76:06:32:47:13:7a:5d:07:7a:bb:46:1e:26:d8:cf:70:
c9:29:85:dd:d1:de:76:19:63:b4:d5:93:26:fd:9c:2b:c0:85:
c8:d0:a0:a8:82:67:61:50:b6:8d:33:95:a6:6b:dc:fb:52:b8:
4a:af:29:ab:c5:92:8f:f1:82:71:8a:ba:3e:25:0b:95:b7:ab:
79:9b:59:2b:af:e4:c4:46:b3:9a:b0:b9:87:cf:65:d7:f4:40:
25:b8:c0:29:e6:fc:f9:ae:dc:31:27:fe:83:5d:f0:90:5c:bb:
2d:ed:c0:78:08:8d:c4:3a:26:fa:62:4b:12:6e:3d:92:d1:9f:
c9:71:83:f4:9f:60:67:aa:cc:be:07:d7:92:96:fd:3b:6f:89:
a6:e0:0e:88:7d:3f:cd:7e:3e:0d:68:5a:64:ec:bb:ad:86:aa:
48:40:08:47:21:6f:4e:ef:59:3c:00:f6:f3:d8:83:59:6e:69:
e3:a5:ad:36:02:a0:fe:8d:05:f1:b1:8d:bd:c7:f6:4e:c1:8d:
b4:b9:c8:f8:83:06:d2:cb:1f:42:30:56:6d:d6:fa:69:39:85:
57:da:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:11 2025 by rpki-client