Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: U7doapKzKq3zmj3tP/yc9CC1rQn3cpONrO33uJcPjxA=
Subject key identifier: 86:EA:AE:7D:2C:19:94:5F:27:36:66:51:5C:A0:4D:0C:37:B9:09:6A
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0197D398B72DF6B1E28C85B7F202D5645A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0FFE
Signing time: Fri 04 Jul 2025 04:01:30 +0000
Manifest this update: Fri 04 Jul 2025 04:01:30 +0000
Manifest next update: Sat 05 Jul 2025 04:01:30 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: 9M5NNuXUV9SWS1j3w5esWgK0CfvoqhOccE9CV3BMDfc=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:98:b7:2d:f6:b1:e2:8c:85:b7:f2:02:d5:64:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jul 4 04:01:30 2025 GMT
Not After : Jul 5 04:01:30 2025 GMT
Subject: CN=86eaae7d2c19945f273666515ca04d0c37b9096a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:8d:7e:fc:a7:ab:d2:f6:a1:d3:d3:df:1e:
41:fe:b1:f2:57:72:9f:a9:3c:c1:1d:a6:a6:24:88:
c1:bb:90:31:5e:09:ad:1e:28:eb:7e:8b:fb:7f:de:
45:5b:ae:2a:ef:b4:9d:16:15:a5:e4:82:2d:b4:15:
44:08:93:73:5c:37:2b:91:c3:7b:7f:9b:d3:3c:6a:
d6:3c:4a:0a:fa:9e:47:5f:8f:21:d3:9a:58:e0:39:
ea:94:b5:17:0c:99:56:d4:da:2d:e9:33:1d:b8:3e:
17:a7:49:92:e9:fb:75:78:e3:c2:7c:e8:83:58:fe:
96:11:6c:74:f6:61:29:76:bf:43:7d:fc:15:4e:d9:
af:d3:ad:bf:38:c2:de:d4:59:b0:0e:2d:a6:82:27:
e5:52:9c:aa:25:12:97:0b:83:2a:54:3c:e4:0c:a6:
41:ab:48:d3:47:0a:9c:19:b7:78:d9:b2:1c:40:92:
1b:75:e0:d9:a5:eb:1d:62:42:8f:91:d8:58:41:81:
bc:80:cc:e7:c5:54:6b:0b:56:3c:fb:ee:8b:93:96:
09:e4:c5:36:12:64:3b:1b:d4:63:bd:8f:a8:fc:b0:
23:34:94:3e:ad:eb:fe:ee:e7:87:14:8c:24:96:61:
c1:ef:51:70:2f:1b:de:4c:e5:60:3a:a9:c7:80:a7:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:AE:7D:2C:19:94:5F:27:36:66:51:5C:A0:4D:0C:37:B9:09:6A
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:59:af:50:43:d0:d1:b9:c8:82:cd:70:4c:2f:a2:4a:11:a6:
62:30:46:07:75:26:02:8b:46:aa:bd:12:ec:09:26:28:84:2a:
a8:69:95:68:6c:c2:63:82:6d:9b:88:67:38:43:56:f2:52:bb:
52:04:3d:01:89:1d:41:bc:c2:86:bd:8f:4c:60:57:0b:c2:55:
2b:a1:e0:91:3f:df:ab:92:75:7c:68:89:7a:a3:d4:33:c2:e8:
8b:30:95:72:b8:57:e2:78:c0:af:6c:ff:c6:49:de:1a:63:0d:
bc:f5:47:6c:20:24:b8:69:9d:6a:bd:31:31:07:cf:9b:ea:7a:
f8:ae:fe:08:8c:a3:c0:71:3b:09:2e:e9:f7:56:4f:62:46:71:
33:a0:2f:05:01:b7:d7:47:80:a2:3f:1d:b0:0c:e2:17:28:d4:
1b:42:ac:fe:ef:ef:53:99:93:8d:96:0b:0c:b6:1d:08:13:59:
52:41:ad:bc:34:05:25:20:8f:44:8e:18:9f:b2:c3:a1:7f:38:
91:a8:ab:6a:ce:09:1e:c1:51:3e:f7:d8:eb:85:80:6b:cb:d1:
7f:3a:1d:42:10:4a:d7:c0:97:ad:04:d8:2e:22:9d:ff:49:f1:
5e:80:90:0a:84:75:24:9e:90:af:95:1a:1d:13:93:f1:29:11:
93:0f:70:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:57:04 2025 by rpki-client