Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: uwL/a/v/W9k6OmZy2i/mJWIb+UxeBCPQkJ3kFTNH6Qs=
Subject key identifier: 44:6F:A5:35:C8:12:FF:09:58:97:2B:AE:78:39:6E:55:2B:F1:8B:A5
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0197B6D764A7F1321BA8B0EF6979CDB9F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0C4C
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: W6POnTopoLL72rq/qWVKoPvdoXQ4ie+xGvI0ivIIefw=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:64:a7:f1:32:1b:a8:b0:ef:69:79:cd:b9:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=446fa535c812ff0958972bae78396e552bf18ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:01:c0:88:5c:52:7d:c0:1b:25:f7:56:dd:
66:cb:e2:52:dc:cc:3f:96:c3:a2:cd:12:78:45:6d:
a7:89:50:b7:8d:ff:40:9c:70:3a:91:4d:b9:d1:0b:
aa:4a:a6:14:c8:c1:eb:04:b4:90:c7:d9:da:af:a9:
da:76:62:c5:02:5a:1a:ad:63:af:c6:44:8b:96:3f:
03:86:e2:9d:1b:5e:e2:d3:79:b5:de:cd:08:ac:c6:
fe:be:b5:f9:6d:b6:d9:af:d6:e9:1e:b5:f1:27:42:
05:72:5b:ca:e3:c9:88:5f:bd:3d:03:3b:22:fb:8b:
ea:b5:1c:01:4b:d1:29:36:42:f6:57:cb:d3:91:59:
33:b7:9c:ae:65:46:81:90:dd:c1:3e:d9:2f:b0:e9:
c9:4a:58:f0:7a:fe:0c:0c:cd:89:cc:e2:40:48:0c:
1d:e5:0b:54:2d:83:7a:66:fc:8f:7b:dc:78:d9:4e:
e8:a9:f6:a7:a2:fd:52:35:d2:c3:80:cd:96:00:bb:
cb:02:bc:09:9a:09:01:3f:f9:51:05:4d:f4:ca:15:
80:e4:88:47:6a:94:47:a7:65:5f:cd:4c:51:7e:bb:
30:aa:5d:41:48:c1:c5:bd:74:f1:1b:73:c7:35:aa:
ca:0d:5c:59:88:03:6f:f8:63:62:f5:88:15:c7:61:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:A5:35:C8:12:FF:09:58:97:2B:AE:78:39:6E:55:2B:F1:8B:A5
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:95:09:16:bc:16:fb:d4:c4:44:5e:59:2e:3a:bb:06:7b:
99:a8:b6:d1:c2:47:2e:c8:93:dd:9c:18:b0:7f:a0:a3:16:65:
06:a7:f9:79:26:c3:94:2d:04:82:79:96:95:61:20:80:6b:32:
f4:10:3d:69:09:08:24:b7:bb:7a:b1:1e:67:21:b3:91:f0:53:
a4:99:a9:c7:64:2b:55:bf:66:c3:f8:e0:6d:d9:dd:66:c1:58:
a2:fb:9a:a8:ac:63:3b:ee:9d:6b:ad:d5:a9:2e:e0:83:4e:94:
c5:3c:81:6e:7b:41:6d:58:67:2d:60:c4:83:45:fb:fa:20:60:
db:f0:84:47:e1:41:5d:22:ab:5b:3b:5b:18:fb:06:a7:f7:2f:
5b:e3:b8:b0:1e:9d:19:d1:ba:09:5f:fe:ba:fe:41:58:d7:e5:
aa:a7:c3:83:9b:75:ea:bc:81:62:42:70:7c:47:36:86:2a:be:
90:cf:f7:18:f1:e5:80:5e:ee:02:3f:45:2e:6b:f7:29:8a:1b:
60:5c:46:a3:99:65:e2:49:19:1f:1b:83:43:b1:f5:c7:e3:c7:
0d:fe:6c:b7:8c:44:f4:38:8e:a6:ac:07:e5:de:dc:a1:ea:19:
c3:8d:34:e5:14:29:36:ba:75:4e:ec:2e:f6:79:ce:9f:5c:d9:
41:7d:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:32 2025 by rpki-client