Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: UcjFYZY+KeoFD+C8+qowzvHp3qaWQ3+aR3tSDCYjVjk=
Subject key identifier: 8C:33:63:35:88:99:4B:1A:A7:03:37:B1:AF:59:6F:48:40:BD:18:06
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0197B6A1E715514697C0D68ADA76CA3BCB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0C5A
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: ctlY1oyZBctl6KzBvJS4vzbEWdf8sV2tllEyFo/howA=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e7:15:51:46:97:c0:d6:8a:da:76:ca:3b:cb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=8c33633588994b1aa70337b1af596f4840bd1806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:ce:e3:bd:55:c7:b3:87:00:08:d8:3b:a9:
0d:1e:de:3d:de:95:1a:2a:cb:d7:12:a6:40:de:c8:
5a:b2:b2:0e:20:19:cd:7b:3b:1f:21:2b:bd:cf:f6:
1b:06:7c:7d:5e:27:e3:61:35:ec:83:dc:d4:ec:60:
d4:97:d3:c2:27:39:d9:e2:2a:5e:97:c0:50:36:ea:
bd:bc:45:6f:8f:72:b5:a2:5c:8e:0e:7c:be:2c:3d:
14:a3:d4:dd:c3:90:a1:ef:6d:1c:f8:5f:2c:d7:98:
b9:fd:67:02:15:19:58:0b:4f:de:d8:16:a4:10:c2:
63:8e:9f:3e:c3:7b:d8:75:80:4a:16:56:78:82:c6:
a7:31:e6:26:b6:22:4f:33:27:92:8c:c8:62:b0:c0:
f4:ec:83:f5:d0:85:04:43:1c:0e:95:a4:0e:10:ac:
1c:05:8b:5f:e0:87:76:60:6c:99:d3:1b:5b:eb:68:
36:7c:76:09:0b:9d:b3:7e:19:3a:a2:0b:be:74:5c:
96:fe:d3:5d:e4:f8:45:9f:f6:0c:b9:4b:a5:6e:f0:
ab:1d:c3:99:9a:c9:19:f8:43:28:bd:6e:70:06:07:
a8:fd:f8:90:30:6d:c3:b6:be:44:b9:06:6d:e7:aa:
a7:d0:c6:10:87:33:3c:66:90:2e:92:9e:57:52:5a:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:63:35:88:99:4B:1A:A7:03:37:B1:AF:59:6F:48:40:BD:18:06
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f7:04:bd:3d:3e:ff:8f:ae:f8:47:59:d8:f4:9f:a2:a9:56:
b3:33:7c:85:0f:61:2d:f9:7c:b8:c2:15:cc:62:4f:61:5c:c9:
c5:6b:c6:94:d0:f3:6c:5b:cb:d4:4c:41:96:1c:4e:e2:00:5e:
7e:42:d5:10:e7:e4:10:60:27:b1:fc:59:ce:e6:ee:51:7a:d3:
3a:f1:99:18:0c:74:c3:00:4c:7d:54:69:ed:76:f3:28:a3:2c:
e3:0b:d1:29:0c:2a:c5:37:ac:5b:5b:51:1b:21:ef:08:85:f1:
9f:bd:f0:d3:b1:01:68:24:af:1a:b9:dc:ad:5a:aa:3f:20:4c:
4f:15:1e:d3:5c:98:e2:d6:4c:1a:f2:46:09:21:ef:87:26:57:
75:df:9e:75:09:4c:1f:2b:46:f6:ca:c8:77:f3:4a:50:09:1d:
bf:1a:5a:3e:44:30:00:1c:8b:d0:b6:7a:31:97:75:b4:b6:a5:
a4:a7:34:df:29:01:de:d3:a7:f8:e9:0a:bb:e7:8f:c0:bc:7f:
9d:d6:62:f0:20:96:61:ef:fc:3b:1a:1f:4a:a5:50:49:3e:f3:
5d:93:f4:b1:1f:95:57:2a:f6:a9:9a:ef:c1:7c:93:c1:f9:ae:
4e:be:fb:e4:13:a8:b1:65:75:8e:6e:c0:a6:33:b3:4a:51:1a:
e5:1d:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:46 2025 by rpki-client