Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: 7JptjuxLY3LNBVu58siYnWHWuNBOuiKe0aSIT3tf8DA=
Subject key identifier: 9E:FE:87:EC:21:C0:30:AF:5C:BF:81:65:F4:11:DF:85:8A:5D:DF:F3
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 0197B6A03D934EFAD05811690EDA3066AC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: Szu08A1qZmHMz77kcTnRZN25J+ZAzjKZEfeu8K2p9NU=)
2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3d:93:4e:fa:d0:58:11:69:0e:da:30:66:ac:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=9efe87ec21c030af5cbf8165f411df858a5ddff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:0a:da:60:e3:86:19:f0:f8:2c:35:23:d0:
24:ad:0b:60:d4:6b:71:2b:25:ba:68:6d:11:ef:10:
3f:a6:e4:cd:aa:81:df:0b:36:0c:4d:56:49:96:b2:
65:d6:32:a2:7e:81:10:df:3b:12:44:99:df:ce:6b:
ca:96:b4:d1:bf:3d:c3:f2:ec:8f:cf:1f:15:9a:84:
a6:20:1e:81:a7:39:75:eb:fd:01:b5:b2:5a:94:0a:
26:76:13:47:d2:c0:d5:2d:5e:37:9f:6b:90:b9:6d:
dc:09:7c:78:b8:c4:d2:d2:a1:d7:47:b6:15:b9:c8:
b7:1c:db:c8:e5:dc:29:79:49:94:75:4f:4e:a9:f1:
be:33:4e:f2:6b:56:94:fb:27:b8:12:6f:28:c1:42:
83:ed:da:9b:b1:e8:81:05:a7:70:3b:5c:4a:c0:61:
62:77:1d:7a:4c:74:d9:d5:ab:10:71:18:eb:1b:52:
27:98:27:0b:05:a5:f3:a8:bf:07:c6:96:75:8d:8e:
d2:a7:6d:8c:8d:30:46:95:ae:d2:be:6e:39:be:e0:
8a:85:e6:ef:20:ed:d0:9e:bd:55:2e:67:54:c2:c5:
6d:b9:66:37:0d:fe:cb:ee:dd:56:29:5d:b6:6f:9b:
f7:81:d1:a3:04:b6:ec:1c:93:37:cd:7d:1d:14:9e:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:87:EC:21:C0:30:AF:5C:BF:81:65:F4:11:DF:85:8A:5D:DF:F3
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:4e:87:2b:ae:b2:9f:fc:c5:02:62:d8:b7:2e:19:ba:ab:
ea:9a:12:bc:0b:10:ab:be:8f:73:f6:6e:0d:ae:ad:63:c5:80:
ab:bb:d0:09:ec:f2:63:7b:8c:61:99:d2:b9:65:8e:0b:f9:52:
c8:c3:bf:d3:5a:25:b4:ac:a6:e6:df:75:37:a7:ef:63:78:f7:
55:9a:a0:50:25:eb:5e:a9:57:ef:87:09:68:3a:ce:80:1d:45:
b7:b3:ae:44:1e:71:df:6a:1d:12:cd:9e:40:2e:a9:b9:64:b6:
18:5a:d8:34:7e:94:d2:f0:8d:f9:62:36:c7:8d:84:55:1f:0c:
3e:ab:1c:bc:f2:cc:70:52:30:ab:4f:dd:93:9a:02:66:30:13:
45:b3:5a:dc:ff:73:b1:fb:89:2b:1b:04:50:e0:2e:54:59:e3:
05:44:7e:53:4d:70:c1:c1:c5:00:8a:8d:85:80:c8:03:65:8c:
3f:5f:63:61:13:37:44:20:b1:3d:53:ff:aa:9d:aa:68:a1:d1:
82:16:e3:f9:a9:5d:a3:26:68:5e:06:cd:ad:53:38:bf:82:8d:
fd:54:df:4b:a0:5d:9d:08:69:c2:c3:2a:f2:83:96:dd:30:dd:
9a:56:ab:2a:9c:a8:c2:c2:1f:e7:4b:05:5a:ba:02:af:94:3d:
5f:05:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:36 2025 by rpki-client