Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: IMzT9JWm4cYuM951WrSYtpnC1CPPkVpDR4ccNrw9phQ=
Subject key identifier: FB:EF:A8:AE:57:F4:8D:A5:93:82:2F:41:0E:75:80:AF:2F:6D:3E:B1
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 0197B6A0E243F166C4FB8910D91272FAEAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: v4McCOWLMyax75g2NvCheCuvm7g+Ds4jcpAZJ4SJmg0=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e2:43:f1:66:c4:fb:89:10:d9:12:72:fa:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=fbefa8ae57f48da593822f410e7580af2f6d3eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:9d:ff:ee:ad:67:cd:29:75:44:0c:69:fe:
73:38:30:00:91:f4:0a:62:e7:4e:09:95:cc:af:04:
04:1e:de:a5:dd:04:05:bc:fe:07:13:39:2e:6a:06:
22:70:ef:ae:d0:f9:27:77:08:06:b2:ed:b7:0d:7c:
04:6e:16:2a:27:db:2b:05:69:2b:42:54:d1:aa:13:
13:c7:87:41:87:53:4b:c8:84:9b:77:04:0b:72:7f:
4a:e9:0e:5e:50:44:ad:ee:31:95:2e:bf:28:55:2c:
62:98:da:fa:99:47:19:65:03:36:01:2d:d6:a3:ab:
4f:0a:89:c0:00:50:91:19:c8:ee:23:cd:6a:23:ce:
34:22:a0:c9:ec:e2:76:fe:4a:51:48:f0:1a:f1:0d:
bf:7d:88:9d:2d:b6:0b:e3:91:bf:fc:dc:0a:f6:cc:
98:1a:12:b1:5d:19:6a:d3:58:9e:d0:01:ad:d1:ec:
0d:04:30:00:5c:4d:35:97:2b:05:bb:61:51:b9:7d:
de:c4:56:ba:11:e1:60:18:0a:cb:1c:d3:ab:36:56:
94:69:15:bc:e0:5d:ec:03:f9:cf:f7:2d:73:08:b1:
2a:9c:e9:d2:e4:7a:60:4d:b7:a3:a0:a7:8b:1f:a6:
d7:65:6b:d0:23:ab:12:aa:db:4a:cd:f4:a8:31:f0:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:A8:AE:57:F4:8D:A5:93:82:2F:41:0E:75:80:AF:2F:6D:3E:B1
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:b2:8c:0c:d1:87:72:6d:37:c7:f2:64:a7:af:ce:4e:f9:
d0:45:56:53:59:ea:fc:8c:31:00:70:88:ac:7d:35:5c:59:81:
53:90:74:58:e0:6a:d0:5b:9c:a0:13:61:fa:3e:7a:bb:0a:30:
38:83:55:7d:5d:36:42:7c:c8:80:39:a9:ea:20:64:55:fd:db:
e2:26:3a:c1:f4:6d:d2:21:cb:40:2b:a4:a2:3d:74:98:3b:33:
26:75:44:25:aa:be:71:c8:59:1d:12:ad:6b:44:a7:86:26:a8:
da:40:9d:97:96:bc:ee:81:43:94:08:ae:71:18:86:3e:b5:01:
57:77:f4:7a:c6:f6:1f:02:e1:0d:54:e4:59:0c:6d:5f:e1:13:
3f:6a:33:6e:bb:52:27:15:f3:5d:37:ff:53:74:b9:51:63:cb:
78:41:b1:65:dc:3d:36:61:78:0a:53:62:35:33:49:52:e0:4d:
19:dc:5a:da:52:3e:23:4e:3d:48:e4:c6:3f:58:a9:a9:71:90:
bb:ad:51:e6:50:3c:f5:8d:07:25:6c:1a:4e:c8:35:89:e6:1e:
a1:ee:41:7d:a6:6b:a8:19:c3:0a:0f:6f:12:22:67:92:37:3f:
6c:b5:e0:b9:5f:44:fb:63:91:4f:74:86:c8:d3:91:22:48:95:
6a:9d:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:30 2025 by rpki-client