Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: 1uiY/qm9xj7OVwwQgB9/W6mcGxxXnthnmeiOkCuzfew=
Subject key identifier: 0C:9A:88:A6:46:8D:BA:6E:A8:86:20:CA:48:9F:D9:25:F6:3D:7A:D6
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0197B745A8F00EB4D7F62CB1067E7D2707EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: RdkcuhmPAe+KfXVI+QHF1szoGmiWaubvbysX9xtboxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a8:f0:0e:b4:d7:f6:2c:b1:06:7e:7d:27:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=0c9a88a6468dba6ea88620ca489fd925f63d7ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:af:39:4f:11:53:8d:1a:05:ec:5b:c8:91:
86:61:dc:5b:40:a3:ff:7f:16:b3:06:2a:a3:eb:93:
04:cd:9d:29:e7:ac:5a:31:1d:f8:09:de:e0:e7:82:
96:54:2a:6c:60:16:d9:63:2a:85:7c:7e:e2:52:ce:
02:51:5a:68:c0:ba:4e:2a:0d:bc:14:5b:e7:00:be:
24:64:0b:20:b3:73:83:4a:ae:fa:22:9c:09:fe:5f:
10:e0:9a:04:85:e8:43:75:7b:08:62:ea:7d:92:0d:
65:bd:f8:74:a7:a7:34:7d:74:50:6d:d5:b5:27:8e:
8b:7d:ff:c7:4a:c8:03:de:b0:46:15:6a:88:dc:74:
d8:ba:1c:88:2e:7c:1e:5d:b0:d1:37:ad:59:ac:a6:
cb:6e:16:f2:cb:22:b3:2c:a7:fe:6a:53:f7:52:19:
50:d7:21:9a:9f:d6:3a:09:e4:06:c6:be:b8:31:2b:
9b:2f:13:42:82:e1:36:07:d3:d6:5d:b5:48:57:3f:
37:6a:cc:87:59:77:8c:e2:12:5e:6a:cd:d1:95:9b:
6e:01:f9:50:43:4d:48:db:35:3a:b4:39:71:3a:93:
d9:52:fa:cc:bf:5b:f0:eb:ca:a0:2c:5b:39:db:f8:
1e:5c:59:51:c9:a3:c2:dd:7e:92:b5:15:fd:91:af:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:88:A6:46:8D:BA:6E:A8:86:20:CA:48:9F:D9:25:F6:3D:7A:D6
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:af:96:94:a4:0d:23:1f:9f:42:29:9b:0d:89:c2:0e:e7:82:
7c:55:8b:7b:6a:8f:94:0d:4b:9b:7d:b0:75:0f:9a:0b:24:21:
13:48:39:2d:32:8a:2f:30:0a:9a:5c:87:eb:90:c5:44:29:5a:
32:80:b4:de:8b:fd:a7:d6:08:fd:9b:28:73:cf:0e:e9:f0:80:
e5:64:44:85:44:a3:ec:a1:5e:5b:9a:f0:11:da:9c:c6:ac:7e:
2d:44:e2:07:10:d6:73:c9:90:1f:b1:51:d2:79:98:97:ee:0a:
20:11:e3:0b:61:ec:7c:f7:48:55:a7:67:60:4e:28:ed:8e:2d:
9a:0b:25:50:73:f5:77:8a:1d:9b:93:ac:6b:5b:82:19:ca:96:
c7:07:4f:ce:28:6e:bc:cd:4e:e8:6b:68:cc:9c:99:bb:d6:2d:
c5:e1:a7:b7:2b:5f:f0:27:45:e5:e9:13:c1:e3:79:a5:b1:f7:
91:71:74:dc:02:e0:16:14:37:ff:06:25:b6:71:fa:9c:33:0d:
13:f6:19:b9:59:32:f1:9a:b8:0a:18:a9:5e:eb:b5:f5:61:94:
83:11:28:a0:05:78:8b:d0:be:96:86:40:d4:63:df:a3:c3:1a:
78:ff:aa:87:b7:eb:68:a0:6c:d9:f8:ad:67:7f:46:f6:82:49:
29:fc:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:00 2025 by rpki-client