Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: tQLp20hWKOsk7pJXoahx9UMNbQr1ONDDysUN8g0xwIc=
Subject key identifier: 29:C3:03:00:F2:E2:9E:38:01:65:51:18:A5:EA:EE:26:04:8B:50:50
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 0197B821066DF252D8ACFA88FFFE7A03974D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 07F7
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: G+EHfvhdamRuyNS6Go/0EggZ3WFi9PjDyDpM02rxcQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:06:6d:f2:52:d8:ac:fa:88:ff:fe:7a:03:97:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=29c30300f2e29e3801655118a5eaee26048b5050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:25:46:2c:70:22:a0:d5:3e:14:0a:c1:0a:
49:ec:fc:e3:4b:b1:a8:ee:8b:be:d5:73:b7:51:ac:
12:e6:4d:d3:4e:4d:9b:65:68:ab:66:45:6f:7b:1a:
45:68:94:b2:60:d5:d8:e2:c1:87:fb:b2:bf:74:69:
01:15:4e:15:ab:56:c6:3e:cc:21:5f:b4:c6:6c:9c:
cd:e1:57:99:04:66:98:51:79:59:81:b4:63:12:d5:
d9:f6:f2:55:ac:a0:33:3c:7e:75:2e:f2:d2:d0:a0:
24:c7:dc:1f:15:c5:51:e8:fb:04:61:22:af:f5:01:
9b:21:d2:58:58:ee:b2:d9:c1:5d:a9:f9:59:59:ad:
ca:a7:66:cc:f6:87:d2:9c:58:7a:70:3f:09:ca:72:
11:9c:5b:65:3c:de:66:92:20:df:6a:6d:75:85:48:
96:87:78:9d:6f:99:e0:a3:11:f2:f1:8d:94:e2:96:
d7:f5:bc:c3:de:9e:78:1f:0e:96:4f:bc:2d:27:4b:
61:a7:b9:ce:e6:3f:15:59:b6:65:d5:b6:ad:82:3a:
da:f7:82:05:c5:82:83:90:ea:de:22:4f:e0:54:e4:
74:78:39:bc:8c:f0:f0:97:6a:1f:94:29:9b:c9:f3:
15:4c:53:a5:f9:3d:fd:20:6e:02:fe:b7:e4:d6:e5:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:03:00:F2:E2:9E:38:01:65:51:18:A5:EA:EE:26:04:8B:50:50
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ad:55:4a:97:c5:a8:c3:3e:8a:3e:a3:2b:0c:17:b0:be:e2:
ed:1f:f6:2d:0c:de:b1:b2:99:16:2a:0e:88:c5:88:7e:e4:d9:
f9:66:67:0e:db:b1:61:14:66:99:3d:9d:48:e0:8b:7c:77:12:
bf:f3:94:66:4f:b7:18:d8:8d:56:c1:b9:6f:0e:84:5d:5a:04:
c2:70:36:ae:a6:84:19:b1:4b:16:81:3d:92:94:55:25:80:1b:
34:49:bd:71:af:0b:57:da:fa:d2:05:32:76:9c:0e:66:c3:0c:
08:fd:5f:9e:f0:bd:6e:cd:9a:f4:05:88:2c:ae:da:19:ce:aa:
87:53:ca:76:83:69:33:58:9f:c0:2c:e0:11:3a:e2:4b:cd:89:
a0:01:13:51:40:1e:92:8d:ab:88:c2:9e:39:37:6a:20:31:45:
d3:25:07:c8:90:98:2f:f3:83:9a:24:33:9a:f5:80:12:ec:d5:
9b:da:4d:2a:72:58:b9:43:98:5c:29:64:0e:e8:e6:b0:90:d0:
c1:c2:89:40:34:80:65:dd:c4:a1:3d:ca:53:50:c7:28:71:b0:
0e:e1:5a:7f:27:84:29:ef:57:90:1d:79:4e:f3:08:9c:67:df:
e2:57:51:29:32:c2:60:50:22:6b:76:75:94:1c:03:d0:f0:aa:
3d:a4:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client