Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: cYfOecgWxlIvLQiYJ1O3D9QtO5Bn2kcT2G8JdFj2a1w=
Subject key identifier: 48:59:60:B9:AB:08:91:66:4B:ED:3D:5C:31:2F:0B:6A:99:64:3B:61
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0198D472A0527EB9653E791F5EB4A0715C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0CEE
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: jFK+W9xJqdTlIZTVniRI72bNuAKo+IdNUUWGabLgnN4=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a0:52:7e:b9:65:3e:79:1f:5e:b4:a0:71:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=485960b9ab0891664bed3d5c312f0b6a99643b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:3b:7e:4f:25:24:9d:2a:96:26:7e:e6:76:
76:da:7f:89:6e:84:f1:76:e2:e5:5c:f7:40:8d:db:
22:6a:ec:2d:cb:9a:a3:61:fd:e5:b6:37:ab:7d:b1:
36:56:0d:26:ea:dc:d6:28:f8:1f:6c:59:ad:be:02:
57:6b:14:3e:8e:fd:3f:11:56:41:15:d8:4e:28:ac:
8f:11:48:55:07:54:8e:bf:25:df:af:42:6f:2c:64:
5b:20:01:b8:3d:4e:9e:53:43:0a:df:f2:6a:6f:5d:
6f:51:44:0c:e2:94:bb:65:15:e5:f3:1e:ad:88:cd:
74:61:81:90:ff:49:c0:ff:98:25:b1:79:db:a4:14:
2a:1b:8f:6d:ae:99:49:20:a8:3d:e4:b5:be:ab:d0:
4d:0a:5b:77:82:8f:50:bc:34:ba:b7:8b:b0:b1:a3:
5d:ad:3b:7f:3e:99:a1:07:4b:76:8b:df:98:1f:b2:
1d:f4:36:8e:c7:71:ea:e7:5b:6d:a6:6a:47:ce:ef:
d4:4a:db:86:43:cb:49:5a:06:5a:ae:ae:aa:13:23:
73:aa:e3:fa:b5:93:8a:40:0a:b1:b7:09:c0:32:c5:
c0:15:bd:0c:d4:3e:df:6d:e4:7c:46:b1:c5:e0:53:
24:e2:30:8f:60:0b:03:5d:a2:e0:82:24:c1:90:65:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:60:B9:AB:08:91:66:4B:ED:3D:5C:31:2F:0B:6A:99:64:3B:61
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:c3:a9:79:10:41:57:78:31:67:a3:ab:02:2b:5c:6e:48:
e6:81:b6:57:31:9e:38:6c:cd:bc:a5:d2:b0:c3:b4:0a:f5:7b:
09:7a:92:25:98:af:2b:b5:90:b9:75:8f:44:95:29:db:04:06:
11:4a:41:c9:a4:9b:ff:45:5d:55:4d:e5:e5:b7:1c:c9:24:22:
d2:a4:21:5b:54:45:f7:0c:85:47:55:dc:52:50:d0:92:0c:03:
58:90:e0:69:c9:9a:93:66:02:f1:18:95:e0:36:22:ae:fc:d9:
a1:d8:a1:d5:32:03:31:e1:82:6d:21:e6:cc:ae:60:20:53:21:
bd:89:20:35:b9:25:e8:a8:f6:9b:fe:15:60:5f:1c:17:4f:a7:
95:ff:02:42:72:c5:67:9e:50:c4:37:0f:3d:64:61:c4:44:ed:
d5:07:a6:0c:bf:95:1d:4e:f3:19:b5:2a:16:75:e1:6c:4c:c7:
93:7b:f2:a2:66:93:10:0e:29:78:ea:ec:44:17:df:3c:15:d8:
71:12:5f:f9:fb:71:b4:bb:4e:53:ce:97:88:1b:4d:c9:2c:a4:
00:1c:0f:26:a9:92:4d:97:db:4a:74:86:39:9e:d8:61:e4:c6:
06:45:d2:4f:71:61:65:89:b9:1b:a7:26:e8:5d:da:26:6c:52:
0d:6d:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:04 2025 by rpki-client