Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: GIjYXQgh4kGiKSgImuppAEV2GuCSD2Rf+Djb0dR/Oss=
Subject key identifier: 49:67:5C:7B:C0:00:80:3A:E9:DB:0B:13:03:E7:CB:32:97:4D:76:B9
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 0197B7EA502FE37E3B984F2071C786304A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 139C
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 2SqTQutsS3U5j+U4bS3WmWVCYOOUkN5G8Qyr2P0j5K0=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:50:2f:e3:7e:3b:98:4f:20:71:c7:86:30:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=49675c7bc000803ae9db0b1303e7cb32974d76b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:23:d0:94:77:bd:75:0d:67:9b:fb:c6:69:
1e:b2:ec:ad:1f:51:a1:b8:6b:45:cf:5b:62:84:34:
74:ba:6a:79:ec:1c:d6:b8:e8:18:00:28:e0:06:99:
c2:34:ea:50:6b:70:26:e5:72:0c:16:0f:03:aa:0e:
ac:06:d1:18:3b:67:a5:b6:04:d5:a2:81:b1:50:c2:
10:45:b3:b5:a5:74:95:a7:3f:a7:e0:78:a8:36:15:
2f:f7:5e:37:d5:c4:89:67:bc:3d:99:5f:bc:38:85:
cb:39:69:36:66:da:71:fb:fb:f5:26:67:ce:ac:7a:
77:08:3c:fe:83:44:2f:ca:b1:cc:df:02:5d:4f:28:
fb:c0:8b:62:be:24:b6:f6:62:1e:bc:e3:a8:8b:34:
14:04:7e:c5:1d:17:65:9a:dc:de:8f:9f:5a:88:c8:
cd:53:3b:d7:13:6d:38:37:21:2f:bd:03:58:a0:2a:
b9:e8:31:97:3a:70:66:7f:f6:d8:ae:ee:78:f3:06:
8f:a2:90:74:8e:20:8e:57:1d:2b:a0:47:08:15:78:
a0:13:db:44:ef:58:43:06:33:7e:d4:0e:32:9a:ac:
34:80:8b:42:f8:96:3b:5b:3a:28:cc:2a:6b:7a:a2:
26:a4:48:bf:ea:c5:72:51:ae:ad:9a:8d:ca:c4:7e:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:5C:7B:C0:00:80:3A:E9:DB:0B:13:03:E7:CB:32:97:4D:76:B9
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:0a:ea:bd:d8:7b:e8:6b:8e:a5:d3:f4:79:95:af:85:cf:
35:e4:81:a6:78:8a:63:3d:02:2c:3c:c8:6b:c1:19:75:14:c3:
ac:37:1c:7d:e0:da:3a:92:b3:45:da:c6:15:1f:df:ce:72:1d:
bc:35:f7:67:e0:5a:2b:b8:21:26:83:79:5b:8e:62:4b:8e:e8:
70:d3:fc:9a:3c:ff:68:04:29:2b:d3:66:9f:82:14:bd:cc:09:
2a:99:41:04:cf:6d:a9:6e:76:99:23:f8:51:d8:ca:e5:73:04:
63:df:ab:3a:3c:07:e5:cd:68:8c:8d:36:cb:e6:fb:50:00:cc:
b1:49:57:4a:91:fa:f8:f2:3d:63:00:fc:3b:d8:45:f9:e9:b1:
fe:39:d3:fc:5a:8c:44:ed:43:39:52:7b:2a:e5:d9:94:75:1c:
c8:ab:ab:7a:8c:5e:40:22:df:84:86:f1:ec:da:ed:52:e5:80:
b2:18:78:d3:2c:d2:cb:e2:b2:ed:3d:32:57:8a:ca:9e:de:a7:
f6:d5:a4:82:ce:39:26:a0:68:24:88:31:5f:91:eb:9c:28:90:
b5:66:b9:0a:9c:26:8f:fa:f4:1c:f0:9a:b7:ff:4c:ef:2e:21:
1f:2b:98:d0:02:ad:04:31:93:de:89:14:80:57:fe:a2:fd:f3:
46:29:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:41 2025 by rpki-client