Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: MLZshJ22uuFs4wY7ksBGMtM8gQyoQ65pdECHZe9ptDU=
Subject key identifier: 18:FA:A1:FC:E0:CC:64:0F:5B:C0:06:D8:0C:D2:9B:6C:25:C4:DE:41
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0197B745BDC53B6A5333BD673BD179810B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 15C5
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 814hqmwM2/i936ksdhWgQFEORVgzqTTc0ubgA3HLSaA=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bd:c5:3b:6a:53:33:bd:67:3b:d1:79:81:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=18faa1fce0cc640f5bc006d80cd29b6c25c4de41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:48:bc:50:7b:ab:d2:c0:ac:33:c6:34:26:
5e:04:14:d0:04:66:d5:e4:e7:36:3c:62:17:89:dd:
51:5b:ac:0e:ce:83:bb:b1:31:c9:27:b3:fd:00:9f:
72:82:fd:66:00:be:a6:0f:54:7f:5a:29:15:95:92:
cf:74:40:e9:b6:c4:c2:c8:54:1d:d6:68:e0:f4:20:
32:b7:7f:03:02:ad:4e:17:c1:b2:81:8e:ec:28:18:
74:6e:82:b1:38:44:9b:6c:83:d4:af:e7:8a:38:e0:
77:0d:91:71:19:8b:26:77:46:93:4b:08:ab:2a:67:
32:66:43:9f:d2:5e:09:a9:96:87:e7:8f:a4:48:61:
7f:ae:06:af:7b:71:84:08:72:ce:d6:31:30:54:9d:
00:46:b6:29:a7:1b:b6:05:4d:7e:61:6b:99:cf:4a:
e0:cb:e2:02:f7:14:f7:e6:3a:9e:e3:6f:b6:dc:0c:
01:23:2f:90:ed:1e:3e:bf:b3:6c:41:b1:18:1b:19:
80:f0:8e:9f:0c:cd:e5:47:c9:64:5b:07:63:1b:40:
40:d4:f7:31:32:67:f0:22:96:79:dc:8a:d2:3c:14:
a0:2c:79:37:47:78:37:63:70:d4:28:a6:7c:37:b8:
4d:11:e1:81:46:75:f3:e5:12:4a:3f:e0:60:14:04:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:A1:FC:E0:CC:64:0F:5B:C0:06:D8:0C:D2:9B:6C:25:C4:DE:41
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:cc:f9:2b:74:a3:79:53:55:17:ff:1d:77:b9:43:30:bb:
b5:11:b0:41:0b:33:00:b7:a7:9d:64:56:92:7c:1f:2e:4b:be:
dc:22:ff:c0:33:6a:f6:57:f6:35:45:be:0b:9b:9e:ce:2f:7d:
23:29:25:67:87:11:bd:66:db:16:10:d0:65:bb:82:e7:e4:c1:
51:97:9e:58:aa:e4:38:ab:ff:54:c2:fc:0a:10:86:11:20:c6:
eb:e2:f3:5c:f4:3d:42:c0:e1:38:08:69:55:01:52:77:61:02:
fc:3b:4a:c2:28:c2:23:3c:a7:da:e1:69:1a:66:9a:09:56:4e:
1f:6d:3a:6b:f8:68:b5:e5:6b:a3:3c:13:22:15:13:2d:3c:f5:
b0:2c:16:ca:51:c6:58:34:30:1b:2d:8f:52:9c:dd:ac:f3:e7:
3b:ff:4a:c2:eb:db:73:0e:c5:ba:97:70:21:3d:c8:8f:3a:ed:
2e:52:71:ca:a1:f3:3c:2c:b2:3d:46:cd:a6:4d:2f:8f:c7:8d:
ab:eb:4e:af:45:5d:30:9a:d2:ca:a3:a7:df:8f:0e:2c:81:f2:
29:b6:5a:d5:23:eb:25:cb:30:8d:16:10:af:46:7a:f1:f4:25:
3f:78:6e:85:e6:b5:11:bd:4c:99:e2:85:44:eb:54:a4:ee:95:
4c:2f:fa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:32 2025 by rpki-client