Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: nGUUVxlNKG4lkFfHEKO8QCnSb98R4YT7JhUblQ/NWa0=
Subject key identifier: 05:F9:58:B1:9F:AD:2D:21:6C:8B:33:38:E6:1C:77:2E:DB:53:B8:67
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 0197B632D25B2663300AF54DF69BCC1EA298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0346
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: yjRf1q//GbOFd4/ypjMcTI1Nyi4FowI7iF/OEKhNbjY=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d2:5b:26:63:30:0a:f5:4d:f6:9b:cc:1e:a2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=05f958b19fad2d216c8b3338e61c772edb53b867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:b6:b7:83:46:88:70:7e:9d:e5:53:e6:bc:
d9:75:4f:d2:1d:32:5e:ce:af:6f:50:6f:4b:d9:fe:
0a:5c:4b:86:08:2e:5c:64:68:79:a6:10:eb:11:55:
3e:15:33:09:c8:0d:a2:0e:b3:b3:b8:16:10:e7:50:
fc:ce:1a:41:ba:f6:6d:73:3e:c4:6b:58:ae:8a:c0:
c8:5b:6c:f4:74:b9:cb:c9:c4:95:38:e2:53:88:85:
e0:8b:b7:1b:32:ac:68:b1:a7:28:17:32:28:ea:04:
b6:4d:98:2c:37:79:a8:b7:0c:03:6d:e8:c7:21:b1:
f8:30:43:4f:39:9d:51:8c:ca:13:36:ae:3f:ca:14:
b4:0f:79:ec:33:31:91:b2:be:34:6c:ce:48:bc:09:
34:77:48:14:81:ad:1f:0a:6d:a2:27:0c:2c:82:7d:
37:8b:b9:a9:90:bb:a6:df:f2:ba:40:8b:aa:97:7c:
0c:7d:79:1a:b9:bb:41:bb:f1:6e:99:2f:d1:96:17:
c2:d5:a9:b8:dc:46:9e:94:d2:d2:ef:b7:2a:c3:fc:
fb:d3:53:de:f2:6f:01:0c:6a:d1:e6:34:7e:f6:f1:
e3:be:44:e9:4c:5a:22:17:4a:a1:d0:f3:0b:00:12:
7f:bf:e2:d7:e1:56:41:12:be:18:05:65:14:7c:1a:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F9:58:B1:9F:AD:2D:21:6C:8B:33:38:E6:1C:77:2E:DB:53:B8:67
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:18:26:19:1a:ef:6f:de:25:da:6c:5e:bc:b1:9d:eb:2a:
d0:80:3e:1e:65:e0:7a:3e:43:fd:f9:a0:da:2e:df:82:a6:34:
c8:1e:76:65:6f:a5:68:96:37:d8:22:e6:77:aa:e1:d5:cc:8e:
d5:d8:5c:ee:6b:52:ee:b3:3a:24:8c:e9:8a:fb:29:c1:4a:da:
a1:b2:16:7a:0e:41:83:9b:47:44:fb:60:f6:98:31:5b:cd:00:
4a:13:ef:98:93:c3:96:bf:cf:64:bc:2e:95:56:ad:55:6d:91:
69:16:69:9d:79:0a:d8:2b:5d:d7:4b:c0:7d:5a:cf:75:06:0a:
ab:94:32:0b:a1:cf:ca:dd:33:a5:c7:87:91:0d:bb:45:1f:05:
1b:df:82:60:bb:f0:ac:b0:31:e5:71:ad:83:2b:87:dd:24:ba:
c8:8d:f5:e9:7b:d0:fa:66:4d:18:28:32:b4:72:df:ad:10:73:
4c:eb:9d:44:50:18:47:02:b2:7b:d9:59:96:3d:44:58:db:76:
58:62:a1:12:27:22:3a:b1:8c:e8:56:49:41:fe:71:fb:4a:1e:
5c:2e:48:c3:5c:1d:ce:9a:d7:9e:dd:66:44:70:da:86:3e:2d:
d5:f6:69:c2:ba:01:dd:7a:3c:69:dc:8c:2e:7a:21:37:70:2e:
95:f6:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:32 2025 by rpki-client