Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: fEYoXAo5m+HHX5i/LFW4580bYIKaX4vdEX5ZdCkHdZk=
Subject key identifier: C4:D4:DB:D6:12:80:59:30:2B:A7:9E:06:51:F2:0C:38:94:57:08:3D
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 0198D65F3E1C55EA076D0C3D113A82A4F1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 1399
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: +uukT9R96bbaV51hwaw5253Hrbz3+v1XyMHzeJBccpQ=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3e:1c:55:ea:07:6d:0c:3d:11:3a:82:a4:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=c4d4dbd6128059302ba79e0651f20c389457083d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:74:50:a0:e3:e4:2a:38:34:b2:e7:0b:a3:
7d:75:2f:e8:53:12:51:22:cc:6a:7a:52:35:ef:76:
98:02:f4:c7:f2:fa:e6:66:f4:c7:b7:0a:8f:e9:d7:
8f:b2:4c:36:de:62:8c:c5:8a:7d:7c:b1:86:9d:fa:
da:27:c7:33:e9:08:4f:b3:b8:4c:a4:fd:33:71:e9:
fa:a3:d2:c9:1a:6d:ba:99:90:77:db:d6:9a:ca:8a:
79:73:ae:b9:54:2f:47:b5:7a:b2:bd:99:06:90:95:
cf:ce:e7:71:d8:20:37:28:96:12:90:e8:d4:7d:b9:
a6:38:09:a8:48:60:8d:e4:67:3c:fa:16:57:f9:db:
25:c5:f7:01:5b:06:c9:48:9e:98:c1:1f:68:be:a4:
e0:6f:45:fd:2c:c3:1c:50:c7:b9:89:4e:d8:26:e8:
97:d1:e7:c0:27:22:52:07:de:69:93:c1:d0:f7:11:
01:63:3d:f7:1f:ba:1a:67:23:7b:de:18:0c:f9:ce:
3f:ec:58:ef:c6:f7:0f:e7:23:b5:ec:99:67:bf:46:
4d:14:00:c6:12:ac:5a:2a:5c:ec:7e:6e:a3:d0:32:
32:c5:5a:fb:6f:99:cd:8f:1d:f9:6b:6e:a0:fb:f6:
2e:2e:86:69:59:2b:70:e6:b7:6c:f4:a5:3b:a6:c3:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:DB:D6:12:80:59:30:2B:A7:9E:06:51:F2:0C:38:94:57:08:3D
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d6:13:73:a5:ee:51:75:11:45:b7:58:e6:19:57:ec:ba:8a:
2f:82:f0:ff:13:dd:88:b9:cf:b8:40:1b:31:e7:12:b1:51:8f:
42:2d:b9:72:5e:03:3d:4d:3d:8a:09:a9:4f:77:63:84:cf:38:
1c:2f:59:8d:e6:3e:98:6b:a6:4c:43:e7:74:63:66:6e:34:36:
27:b9:35:bf:e9:0b:e0:8c:8e:02:e0:f2:73:dc:30:e9:03:33:
7e:03:49:02:83:86:7d:21:8a:af:58:c2:7b:f3:1d:7a:c1:18:
04:9e:0a:d7:9d:cf:5d:86:16:fd:33:33:4f:b6:80:97:84:94:
65:93:7e:65:77:b1:eb:b8:b4:14:79:59:80:6a:1c:16:ff:0f:
45:00:2d:fe:29:11:f1:73:d0:26:8b:fe:a7:7f:26:41:92:87:
29:13:f1:0d:c1:0c:eb:64:6c:4e:ca:8a:03:8e:6e:16:72:a3:
c3:3a:2e:cc:db:44:b0:31:fc:8a:81:61:d8:a0:65:7c:3b:05:
23:72:6b:3a:0f:dd:58:4b:83:b9:ca:d8:4e:db:1a:42:68:f1:
29:ed:0d:e1:df:16:5f:15:05:fe:36:8d:51:c9:8f:55:eb:56:
f0:49:49:1e:f7:c2:ef:34:45:e9:cc:51:5b:c9:71:5d:f5:44:
c1:a1:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:55 2025 by rpki-client