Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: cGMswlPuod93BtVgvOcWREHB8ePy2SnjYNkfSFXT5Ms=
Subject key identifier: 69:16:88:B3:37:3C:56:56:A2:47:56:79:4F:E8:84:99:7A:5E:3B:C4
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 0198D65F04FD62E2B4773409CDBC45AB9713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: DTalAa6d5QRq1PuT+roZ/QpQ9xTc7g29RUcYWTUH2vg=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:04:fd:62:e2:b4:77:34:09:cd:bc:45:ab:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=691688b3373c5656a24756794fe884997a5e3bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:e0:66:b4:0c:1b:4e:d2:d4:7a:81:5e:46:
11:0b:aa:28:17:a6:a5:49:18:46:ce:92:26:34:29:
a7:2b:cc:7b:3b:88:36:0f:f6:5a:98:1a:09:20:c9:
c7:ef:c1:d6:84:a2:68:91:3f:3b:a0:98:34:43:e3:
66:08:75:c1:c5:b0:b2:bd:cf:82:1a:4e:0c:6c:34:
a4:c1:d7:e8:82:79:7a:3c:76:dc:e6:5d:b8:43:bc:
05:c3:7f:42:0c:d5:d5:e1:3d:ae:2c:b4:0d:60:10:
91:d2:62:d0:ba:e7:7d:af:fa:85:cc:95:64:51:68:
eb:70:d6:6d:5d:c0:26:f1:8d:52:51:47:b9:d8:45:
f3:7f:33:82:6d:67:42:8c:31:06:7c:34:2d:b6:58:
fe:f6:d3:81:c1:8f:4c:03:ce:59:7a:b9:63:96:70:
1d:04:75:c0:06:6e:1b:49:c6:ba:fe:2a:18:5e:01:
e6:b5:d7:54:99:cb:68:b1:56:31:65:9a:83:ce:4d:
f8:f5:61:c3:c9:8d:14:0a:c7:f2:9b:5e:8a:99:f2:
70:c8:03:12:93:58:c3:5f:ce:43:ed:a4:89:f4:cf:
72:63:d6:c2:c6:78:bd:d9:0e:51:f7:d4:f0:45:5c:
36:c9:fa:94:f1:13:e6:c1:18:2b:c4:d4:1a:25:89:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:88:B3:37:3C:56:56:A2:47:56:79:4F:E8:84:99:7A:5E:3B:C4
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:24:3c:2f:55:34:7e:b3:3b:69:09:35:d7:19:8f:06:a9:0e:
dc:63:2d:8e:44:ba:01:b3:8d:24:aa:48:fe:dd:71:48:6e:cd:
07:b6:48:43:33:5c:35:92:b0:42:b7:16:41:25:05:0d:da:92:
24:4a:f9:60:d3:d0:e7:63:eb:30:2f:ac:92:2a:05:e9:eb:96:
58:6d:51:91:7a:a3:37:b7:db:af:70:9f:97:cc:39:4f:f4:f8:
18:0a:bf:bc:12:ec:29:07:32:89:ae:12:b1:fe:09:fb:f4:de:
bc:79:2b:42:0d:47:f0:03:17:e9:f0:f3:51:0b:a8:f4:85:e0:
e6:ab:3c:02:d6:7d:a3:88:57:6c:68:18:8e:6c:b8:76:7d:e8:
84:dd:8c:3d:37:c8:62:07:98:ba:d7:5b:f9:37:f1:b8:d0:0b:
e4:22:de:5a:0f:7f:d5:9e:af:53:e7:3b:08:47:cc:83:f5:b8:
47:7e:8f:bd:96:5e:46:ad:49:e4:1e:94:e2:e6:9d:c5:24:43:
28:c5:90:bb:5f:66:18:da:af:90:9c:c0:20:60:76:21:53:81:
d8:7d:ab:db:af:a4:5e:12:cf:11:4a:68:80:bf:ac:a9:60:b4:
33:0a:2f:ea:5f:8e:75:fb:7e:2d:17:2d:fe:5e:e5:d5:7c:c9:
f4:15:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:52 2025 by rpki-client