Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: PU71kBA/UWkaTDqvw6YUsAEf+lPss8IPZb/X23aNqk0=
Subject key identifier: FC:D9:78:CC:1A:CA:76:0B:6B:D2:BF:73:45:62:16:F5:D9:AC:9A:5A
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 0198D5BC27EA5AF0B6414D0A87C2E15FA2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 1430
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 9lH3FQbnwj47n8q42AtihqJmaYAc8SBaPRALqHXPvMA=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:27:ea:5a:f0:b6:41:4d:0a:87:c2:e1:5f:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=fcd978cc1aca760b6bd2bf73456216f5d9ac9a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:c3:00:3e:2d:f6:c2:ba:d5:1d:ed:27:04:
36:d3:cb:e4:a3:e0:16:d0:fd:16:f3:e6:75:54:35:
9c:b5:92:48:89:b7:3c:69:92:d3:1c:b9:ac:a8:6a:
d6:03:ed:5d:9d:67:75:41:24:11:ff:c2:cb:7f:c7:
1c:f3:1c:b8:8e:55:38:1d:5b:dc:9e:3f:fe:b7:42:
47:d8:56:28:f8:6c:7d:6e:16:26:e5:b7:c2:fb:90:
b8:ae:e9:19:63:ba:62:c6:6b:b2:b2:0f:68:2b:eb:
00:fa:e6:a3:7e:dd:c1:ef:9c:cd:e4:4f:85:35:70:
fc:e7:15:91:a1:4c:6a:f8:60:a1:03:f4:fd:ec:88:
d6:96:d9:77:86:94:79:10:0b:5d:c8:6f:da:c6:e7:
8f:a6:3b:56:b2:1c:42:27:fc:94:16:20:50:eb:d7:
37:63:ab:6a:56:63:ad:fd:e2:6d:a2:6b:99:c0:f5:
73:39:a0:f6:a5:2f:df:00:55:8e:f6:49:ce:a1:ea:
b8:d9:06:5e:dd:1d:5b:89:76:f6:a5:e9:ba:dd:06:
9e:2b:cc:14:52:76:f5:10:6c:ee:01:44:85:41:d6:
6a:4b:5e:50:74:58:89:60:fe:42:20:4f:1a:05:ee:
1d:9b:91:ba:b2:0b:bc:7a:f5:c9:22:40:3d:ae:94:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:78:CC:1A:CA:76:0B:6B:D2:BF:73:45:62:16:F5:D9:AC:9A:5A
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:90:cd:b8:4d:7c:ef:2a:a7:91:12:a6:81:aa:8d:4b:2b:
5e:27:17:b8:cd:5a:3f:5a:de:ee:25:04:42:74:68:0f:16:f5:
f0:bd:c7:52:a5:2b:62:e1:2a:55:89:7a:09:c2:d7:f7:0a:ca:
0d:e8:51:89:42:4e:9c:48:cb:3a:48:31:a1:ed:72:72:da:5b:
74:6d:f7:be:5d:7f:5b:07:55:d8:29:c4:af:d5:f3:35:c5:f8:
38:a8:93:2c:f5:6b:b3:1d:59:d2:84:bd:01:b4:6d:ec:54:db:
4a:bd:fa:0f:9c:85:63:a3:23:6d:49:25:7a:43:c8:b3:96:cc:
bd:21:bf:d0:58:d0:ef:6d:6c:ac:d1:01:c8:0b:c6:57:e8:f7:
8b:3d:cf:a3:23:e0:ca:6f:2a:e0:89:5e:a0:e2:2e:05:db:e5:
08:96:3b:c5:4d:d1:a3:e4:2d:f8:4a:b2:52:e7:62:04:33:a0:
5e:fe:5a:71:c4:b6:48:1b:92:23:c2:53:ad:a0:ba:74:35:95:
b5:e0:fa:16:ff:47:3b:dd:58:ad:64:32:6d:6e:2b:5f:60:aa:
fe:85:09:b8:e1:b4:0e:9f:75:15:40:74:44:d1:9b:47:19:b2:
d0:03:af:70:ea:de:67:ce:02:a0:81:d8:5b:84:4d:16:82:aa:
32:a0:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:20 2025 by rpki-client