Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: pWMmZQu9e309uysG8Dk64iHLMTyB4iVRhZgjBD3h7yY=
Subject key identifier: 5D:90:9F:22:26:C9:86:D7:12:AA:40:83:07:7B:E6:81:6C:FC:1D:FD
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 0197B6A11B64D4F688B58CEB6976C5DEB5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 1304
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: vXn5WZxgdB441iYcsCmpMvbrXCYmJ9w0fAPofNNVTio=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1b:64:d4:f6:88:b5:8c:eb:69:76:c5:de:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=5d909f2226c986d712aa4083077be6816cfc1dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:b4:86:5a:70:9d:df:41:05:a7:69:09:e0:
2e:bb:75:54:3d:67:b1:4a:ee:b3:de:8e:fa:4a:6f:
70:ce:25:20:2a:da:30:e3:4a:2a:56:7e:4c:ff:41:
26:6e:0f:08:55:71:b2:f7:3f:f6:ad:17:e8:f1:08:
10:65:01:7b:b9:64:9e:a9:f2:f1:fd:73:ed:c4:16:
8b:0f:a6:5f:d9:3d:f6:90:75:72:98:db:59:65:00:
dc:57:9f:00:c8:0b:97:87:01:13:71:f6:bd:03:fc:
95:a9:57:61:c8:c1:f3:51:19:d7:3a:a2:c5:16:9b:
0b:14:48:28:e1:a3:52:1e:27:90:3e:fd:50:7a:c1:
9f:ba:58:57:5e:a8:44:4f:eb:21:4f:ab:70:b3:65:
f5:86:21:02:8f:9a:5a:28:69:56:1c:58:ff:d8:5a:
9f:db:43:7f:4c:80:b8:55:99:92:a3:4f:f6:18:ad:
ce:c0:f8:fe:b3:e8:7b:b0:92:d7:47:97:3e:3a:f7:
45:cd:83:00:61:a6:b8:4c:ce:41:7d:13:44:86:93:
97:86:d4:18:b9:d6:2a:8f:2b:99:dd:97:fc:38:56:
f5:08:c6:f2:69:4e:7e:83:8d:a2:1b:de:f8:04:87:
bd:ea:32:9b:95:1f:9b:f9:75:cc:8e:d5:63:bb:51:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:90:9F:22:26:C9:86:D7:12:AA:40:83:07:7B:E6:81:6C:FC:1D:FD
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:d3:97:c3:89:0c:d5:d9:10:2c:72:2f:c3:2d:60:50:32:
33:72:ca:84:25:ef:42:20:01:f2:28:1f:39:b8:19:aa:c0:78:
42:8c:6c:5b:23:b1:7b:8b:dd:f9:9d:57:e6:48:a6:13:32:c1:
c2:07:6e:38:bc:1f:a0:ff:5f:5a:c0:15:40:01:17:21:e1:39:
7d:54:0e:ea:76:39:be:01:11:a4:c5:3c:01:6f:df:16:b4:d6:
e7:f2:22:fe:9f:60:2f:cb:85:61:ef:25:e3:28:72:22:91:f3:
2c:99:a0:b4:aa:48:1f:0d:10:4b:0c:1a:e7:98:80:13:d6:a6:
d1:79:da:f7:ca:6f:d8:79:1f:3c:c6:b8:b4:0f:b9:88:fd:4e:
32:86:de:99:68:30:25:01:9f:b2:21:54:97:7a:4b:83:51:d9:
dd:50:9a:4d:72:6b:5c:13:43:3a:1a:e1:76:85:88:45:9b:7c:
9f:c0:c1:8a:f9:62:a7:07:a3:25:26:6d:47:dd:b6:b9:b4:1d:
a4:76:53:81:dc:19:fd:3b:3e:38:5e:17:43:ce:90:ec:89:28:
27:29:c0:d6:0f:c9:d0:b8:63:e5:d9:64:3d:8b:ce:fb:b0:ab:
27:56:b6:4d:7c:ca:36:33:b9:f9:ff:77:9f:4e:c3:ee:eb:60:
9f:bd:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:53 2025 by rpki-client