Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: 9RnLowtqPgvKhgcrcZgRhp4iJBMlGhitVCf4Wt4GNH0=
Subject key identifier: FA:AA:C5:2C:65:AA:73:15:C4:15:5A:D1:4C:74:D4:CA:B6:18:AA:24
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0197D21859E0297550D5AF845CCB395ADD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 15CB
Signing time: Thu 03 Jul 2025 21:01:40 +0000
Manifest this update: Thu 03 Jul 2025 21:01:40 +0000
Manifest next update: Fri 04 Jul 2025 21:01:40 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: K0ZfyvXucR6++UJM8CyXnXhmD14unmFbPJ9lojUpdEk=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:18:59:e0:29:75:50:d5:af:84:5c:cb:39:5a:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jul 3 21:01:40 2025 GMT
Not After : Jul 4 21:01:40 2025 GMT
Subject: CN=faaac52c65aa7315c4155ad14c74d4cab618aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:63:b6:4a:22:7f:98:05:3a:30:dc:75:25:
51:71:0a:13:10:f7:66:ef:bb:71:c8:4a:9b:2d:24:
48:88:b7:d6:64:62:b2:3d:8d:4d:05:70:37:65:f0:
fe:4f:b7:e3:56:8b:52:d9:f8:9f:4a:3b:74:22:4a:
b8:d4:34:ae:4d:d1:77:b1:69:d2:9a:ca:91:aa:83:
01:85:97:f9:2b:f2:79:d1:2d:6c:25:62:ad:f0:86:
77:f3:b0:5c:a8:95:a5:69:e3:39:1d:6b:95:f5:2a:
79:a3:14:e4:5e:96:f7:8a:95:4b:d5:2f:78:1c:3e:
88:97:f8:d4:1d:21:64:ee:8a:e6:d2:28:bc:df:95:
e7:c3:a8:d5:0a:9f:b9:38:50:1b:2b:c4:14:80:50:
7c:ce:32:9e:b1:1f:f4:ed:1d:57:4f:c9:de:4f:eb:
63:33:c1:4b:6d:ea:69:75:25:8e:2d:a2:fc:37:2c:
4f:ea:2c:c8:7c:1a:41:de:48:f8:6f:51:24:14:1f:
db:38:3c:32:a7:45:1a:13:d9:a1:da:00:6a:59:7b:
b0:ee:74:53:3d:c6:af:c7:f2:0f:d4:e0:24:da:a1:
aa:66:82:75:46:99:d3:88:2d:f2:06:cf:69:12:c1:
a5:c2:d0:87:73:a8:14:64:67:45:57:4e:a3:5e:c4:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:C5:2C:65:AA:73:15:C4:15:5A:D1:4C:74:D4:CA:B6:18:AA:24
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fd:b6:48:bf:a7:7f:f5:e6:a8:18:4e:7a:c0:90:76:d5:cc:
c2:64:98:c1:c4:94:3c:2a:2d:e6:69:3d:43:1b:d3:4b:68:c4:
90:88:af:6b:87:f4:f8:ae:95:5c:b0:a5:25:6d:25:15:d6:85:
77:f5:7a:30:ae:72:fa:c0:2a:83:52:70:be:f0:34:ae:f3:6a:
c2:89:45:32:ec:26:1c:93:c7:09:b3:31:2e:f5:5f:38:d0:98:
f9:ca:f9:0f:8b:64:e4:9a:9c:de:0b:72:b1:2b:3a:3e:e9:fa:
94:0d:7e:64:64:df:9e:f0:d5:23:d1:c4:4d:21:4e:bd:92:a3:
b1:8e:43:d3:c7:89:4f:3c:e9:ec:10:bc:c6:a8:cf:56:03:8d:
42:b8:51:bb:a0:a2:5f:b3:ae:6c:f7:33:6c:48:4f:b1:1c:72:
c9:76:dd:3e:2a:b8:f8:a4:84:fd:98:b1:fe:4b:d3:eb:61:1d:
87:65:12:d5:de:ee:05:2f:03:bd:c7:10:3c:e8:70:64:d5:3f:
57:49:1f:4a:0b:1e:74:21:27:3b:ab:c2:de:0f:89:3d:e0:13:
b4:ec:01:fa:5a:19:78:66:1b:d2:55:60:b6:8d:63:9d:17:e6:
86:5f:17:f8:26:47:74:8e:b4:09:43:31:2c:d5:55:f1:2b:58:
73:e9:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:53:28 2025 by rpki-client