Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: Fswmo4iz/Qb2ic9D5voMyrRIOdc9VhdYP8z7+WzW3ro=
Subject key identifier: 87:50:0F:9E:4D:02:5B:92:AB:DB:A6:D7:5C:74:57:DF:E4:A9:92:B6
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 0197C6EF422C4FDCF2476485E6EAD90D3C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 17:00:58 +0000
Manifest this update: Tue 01 Jul 2025 17:00:58 +0000
Manifest next update: Wed 02 Jul 2025 17:00:58 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: qr5oqwhLgCxP3TPR/sI3xwSlQ058nyQLiUxnjL8bOCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:42:2c:4f:dc:f2:47:64:85:e6:ea:d9:0d:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Jul 1 17:00:58 2025 GMT
Not After : Jul 2 17:00:58 2025 GMT
Subject: CN=87500f9e4d025b92abdba6d75c7457dfe4a992b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:24:f9:57:ba:04:49:cf:4a:7d:97:51:05:
f7:d0:99:3d:01:3b:b0:e9:06:8c:3b:aa:27:74:2b:
cd:b0:6b:b4:c5:95:e7:fe:13:df:15:38:6c:24:f9:
90:fd:99:ee:52:e0:85:ed:12:cd:e3:04:7f:ae:ed:
1a:ff:bc:ff:96:90:66:79:63:ac:01:29:71:f8:8e:
42:c8:ee:53:2a:e1:77:f6:31:6f:8d:25:27:ce:0f:
4b:5d:d8:ac:49:93:f9:f8:86:9d:ab:b1:7c:b2:98:
85:6e:e6:d5:b4:23:52:05:f7:4c:1d:f0:0d:38:0c:
20:69:8d:d4:90:4b:33:f7:63:66:f8:ce:09:6c:0d:
f7:a1:bf:af:e8:39:d1:37:2e:2e:cc:33:62:2d:5e:
ca:94:09:b3:d3:fa:62:b1:5a:04:0b:c8:a1:f5:6e:
5a:11:04:36:dc:09:bb:56:a9:49:8d:b8:d7:e9:ca:
ea:6f:21:3e:c2:8e:17:7a:d1:0c:d3:ed:99:bb:0c:
b2:9f:49:8f:31:3e:9a:42:1d:23:22:37:12:04:94:
4e:66:0c:ff:12:31:63:7c:6b:38:2a:e1:b8:5c:f2:
fa:4c:31:6f:66:99:45:6d:3e:ba:95:84:1f:f6:f3:
e5:a8:dd:06:70:fd:39:d1:ab:a1:86:e1:88:07:48:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:0F:9E:4D:02:5B:92:AB:DB:A6:D7:5C:74:57:DF:E4:A9:92:B6
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:57:17:97:f1:7b:9c:c7:2b:5c:3d:4c:f6:19:1c:90:5d:d5:
bb:14:28:7d:64:a4:25:48:49:2e:75:4d:93:31:18:be:38:60:
29:df:53:b6:08:ca:49:26:3d:04:52:b0:d1:b9:46:ef:a2:90:
6f:f2:83:c0:66:8f:92:59:56:43:7c:cb:ca:a0:ec:db:01:b3:
95:d1:42:72:10:51:9c:42:24:09:f7:c6:64:8b:7c:8f:35:ba:
00:2f:48:18:18:05:33:93:fa:1e:29:cb:7d:4e:51:7a:78:13:
cf:7f:dc:42:e4:59:66:80:b8:ec:c1:9c:a0:f7:2b:7a:19:d7:
8f:75:9c:f4:e6:b5:76:d6:e6:32:2f:d6:0e:15:b0:07:d8:7f:
63:f5:f5:ab:23:ba:fc:a6:03:6c:d5:f0:15:20:ae:c8:47:1f:
c4:b1:72:f4:11:77:bc:ac:60:6b:39:6f:14:78:10:03:c9:52:
10:20:8b:7c:fd:24:d9:b1:2c:9e:27:b1:50:f1:59:c6:d9:c9:
5f:a9:c7:79:a5:65:db:61:b1:52:ca:2c:33:cf:88:78:72:83:
45:92:ac:e2:c4:65:80:b3:6f:b7:41:df:14:3d:ca:af:7c:6b:
bd:85:28:d1:70:6e:35:f3:10:d2:31:28:8c:6c:6b:f7:db:fc:
79:0c:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:01:25 2025 by rpki-client