Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: 5JTDP7KEiYUQrHcjDyd/nPBSWd8sXnX0n8LZrKolpbY=
Subject key identifier: 25:C8:63:DD:F5:0D:45:D5:17:88:0A:89:F3:7E:F1:01:7D:48:D9:09
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 0197B7EAB20D7765056EC5D9486800F0CBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: A6
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: hs0LsD1Db8tTG8LUBNc7yigLRUhTECRsMrtc8/KBDtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b2:0d:77:65:05:6e:c5:d9:48:68:00:f0:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=25c863ddf50d45d517880a89f37ef1017d48d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:39:b9:28:a0:37:6a:cf:6c:a6:f5:f2:0b:
03:b9:38:ad:a9:98:46:1e:d7:dc:8a:34:3a:61:18:
0b:07:1c:ff:d4:3b:65:e6:61:7e:ae:57:dc:fb:49:
6f:5f:46:8c:1b:7d:c0:8b:3c:24:82:6f:0d:cd:6a:
07:6c:d0:02:1c:a0:e2:09:6f:e2:f5:44:34:5d:27:
61:1e:a0:4f:b0:54:cd:ed:e5:30:88:3d:56:66:f4:
1a:24:9a:b8:bd:d0:da:eb:e5:60:39:5f:60:4a:fe:
55:a2:50:84:e5:1b:78:0f:3c:0f:17:f8:ff:33:cb:
71:06:7b:ed:16:2c:f3:2d:7f:7b:e5:1c:16:40:b2:
44:91:38:f6:b4:df:36:1c:ff:8f:c1:d7:0d:4c:bd:
e5:1f:b9:b5:7c:3e:6f:01:e8:81:7b:c0:4e:08:30:
e5:33:fc:20:ee:26:52:93:3e:68:30:d8:dc:35:51:
c4:8f:5d:fa:4e:25:03:57:e6:8d:64:a7:b6:16:2d:
04:12:a7:6a:41:90:14:18:d7:a4:76:f9:65:8e:97:
2a:db:72:11:65:f9:be:04:e5:b7:f8:9a:6c:58:b0:
8c:56:1e:95:25:aa:bf:97:ee:10:0c:c9:4f:e1:64:
d2:46:5e:77:e5:1a:a2:cb:9d:ae:aa:51:6c:65:b4:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:63:DD:F5:0D:45:D5:17:88:0A:89:F3:7E:F1:01:7D:48:D9:09
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:ba:82:92:5c:f0:8e:d7:3a:52:6f:f3:63:9a:be:cd:d4:
6c:c9:b7:24:da:44:fc:0b:29:5c:e7:a3:db:cc:19:fd:01:0a:
1f:7c:e2:26:d8:1d:ad:ee:60:c0:99:fb:75:7b:50:8f:10:b8:
14:e2:47:d3:5e:f1:06:2b:b5:32:1e:c3:3e:10:26:e9:12:d7:
65:9f:c0:b1:75:6d:f0:ef:a7:44:a7:92:1e:b9:f3:f0:93:b9:
55:f6:04:cd:06:b7:8b:9c:54:4b:ad:65:2a:a9:42:50:6d:2b:
a9:ea:b0:a9:d6:a9:c7:51:90:32:8d:5b:92:2b:9d:c1:24:5a:
81:eb:29:95:56:47:04:bf:b8:9b:eb:d1:fe:bc:73:b6:b3:72:
65:f7:bc:b9:e8:11:fa:cb:ce:01:2e:af:be:0f:fd:f2:ae:63:
47:22:3a:98:86:29:63:b7:a8:cd:12:c5:7e:69:de:5a:24:4e:
70:b2:21:fe:62:a9:70:1d:ff:09:6f:fb:6b:20:81:30:b1:3e:
00:60:a6:9e:93:06:9e:18:ac:d8:a0:52:32:c7:23:4c:fe:6b:
ee:33:72:a8:2b:bf:05:0b:a1:ae:44:c3:2f:c3:24:42:db:85:
c3:52:f7:03:34:cb:8f:d1:40:71:92:3d:b3:c6:41:39:0a:20:
1b:38:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:25 2025 by rpki-client