Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: yxHr+hwHz+iRN5djWV8tZHE7WSjqkYgRprjKj9M6ra4=
Subject key identifier: 2B:6F:3B:38:E6:0C:0D:CC:BF:50:B5:83:B4:CA:B8:38:BB:CA:CD:81
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0197B745874FFE00A45095BFDF660890A206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 07CA
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: DDiE7UsNdEehQydwGXjCm5LMREh+TL0AveCuxH5ASVc=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:87:4f:fe:00:a4:50:95:bf:df:66:08:90:a2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=2b6f3b38e60c0dccbf50b583b4cab838bbcacd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:f3:66:3a:4f:ae:fd:2b:27:5f:43:68:1d:
d2:00:85:a0:73:cc:3e:19:d1:2d:60:95:65:ca:eb:
3a:55:9a:58:8f:31:d9:0d:cd:ef:e1:a2:f8:16:80:
9d:52:45:8b:57:03:70:b3:b4:5e:3d:26:35:b9:d1:
74:6a:6a:5e:99:5f:fa:a5:cd:eb:ca:86:94:34:5b:
94:b8:19:ea:5c:8e:07:36:fa:c3:3a:40:8f:c5:af:
84:66:78:11:74:c7:ef:1a:7d:38:69:63:90:c6:eb:
90:7c:4d:47:26:93:45:1a:f7:ca:47:44:ec:b5:21:
0d:15:bf:58:e0:bb:b9:1c:a6:71:04:41:b1:04:bb:
f7:98:59:19:8e:f7:7a:63:ef:0f:2e:38:74:84:1d:
9c:a3:08:bf:4e:d8:52:f7:57:01:65:01:c5:11:66:
1b:20:dd:a6:35:cc:52:bd:44:39:82:fa:98:d9:cd:
ea:97:8f:a7:ba:37:21:08:7b:b1:eb:16:a6:82:49:
0b:4f:94:34:42:28:ac:e9:2d:cf:af:f8:fc:27:e0:
1c:ae:36:b3:d2:0e:fe:6f:81:1a:94:2b:35:0d:62:
e9:3c:13:c2:f5:87:b5:08:f4:e0:eb:ec:be:0b:73:
e6:ee:be:e5:6b:d3:ea:49:cb:c5:68:c4:0d:ca:7e:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:3B:38:E6:0C:0D:CC:BF:50:B5:83:B4:CA:B8:38:BB:CA:CD:81
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:1a:20:87:e0:b2:c8:b4:68:8b:be:9c:64:e8:b2:83:a7:
b8:55:06:d8:9d:ef:43:50:9a:0d:a8:77:ce:fd:ab:09:3c:a8:
46:ce:4d:34:a8:07:ea:30:b1:4a:2e:d9:31:c7:68:b4:de:cc:
9f:23:db:69:58:63:7e:20:48:3f:ad:fb:b4:54:99:0c:08:4a:
74:f8:a0:4f:1c:36:1b:0b:56:9d:34:09:cb:2b:6b:61:b5:53:
ec:ad:a7:cb:5c:09:b0:43:43:cf:0b:38:f1:27:88:81:ee:64:
13:59:01:95:de:ce:f7:9f:47:7b:a7:2c:d6:4f:32:1c:67:ce:
81:e5:56:b7:c6:d9:a7:e1:18:8b:48:9f:bc:2a:62:fb:82:f0:
d9:32:3a:0a:38:49:e4:95:a6:41:5c:26:54:0e:80:1a:87:49:
ed:d6:1b:81:cc:2b:0b:84:5b:48:9c:4b:0d:76:3e:75:e4:90:
a4:ea:88:c8:b2:f1:ad:e8:f0:72:0a:52:ec:ba:90:96:7f:a9:
6a:ad:2c:c7:c4:f4:59:3b:c9:f8:45:ad:69:65:03:18:0c:69:
c3:36:e6:29:77:8d:e2:2c:31:04:58:0c:67:a3:31:15:a1:82:
68:55:e2:7c:99:11:a0:83:98:bf:ae:eb:19:17:04:56:c9:b6:
b5:67:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:05 2025 by rpki-client