Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: BCma2Sm4gKtFU24iMsXOLliR6bG8//kzrdHR3aL/PxM=
Subject key identifier: EE:CE:7D:DB:D7:D1:D6:A5:56:5C:22:63:99:F6:DF:14:E4:C6:E5:2A
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0198D515CDFA32FF794BD17D810CBA73C393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: MT8MifhxLl7J1Ar48P0atWfHQo7bUXiRYLxiK1+Ds4o=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cd:fa:32:ff:79:4b:d1:7d:81:0c:ba:73:c3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=eece7ddbd7d1d6a5565c226399f6df14e4c6e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:41:1b:d2:cd:95:24:e1:16:cf:0c:03:1f:
63:8b:30:40:64:8b:34:a1:8f:05:47:fc:e5:52:44:
2a:25:dd:00:ba:9c:7c:b3:1f:9e:1a:9c:58:b7:27:
de:f0:52:db:a1:7b:f7:b4:08:13:8b:30:61:f9:7b:
00:27:25:36:86:41:00:0b:79:00:b0:96:98:dc:7a:
b9:b2:04:4f:67:c7:32:85:c9:d0:d1:11:87:f0:22:
21:fb:2b:98:01:b7:86:ce:25:dd:ae:32:74:1f:ef:
f4:96:9a:15:1c:e0:cd:cb:c7:65:d5:cc:95:b4:c5:
0e:d2:b2:64:c5:98:15:c9:5b:f3:78:74:82:4f:1f:
e2:a9:04:cd:5a:d0:4c:72:95:0f:c9:66:71:f7:59:
b9:ce:40:0b:95:d1:d1:00:79:52:50:81:c5:25:1d:
2d:cb:5f:e1:8a:38:23:98:a0:7c:4d:6f:89:37:9c:
49:ac:d3:80:23:50:99:49:f6:5a:45:8d:65:24:e0:
8d:7f:e6:e3:35:e1:6f:bb:98:93:0e:78:38:02:a5:
f4:39:09:d9:9d:c1:28:ca:b1:5a:66:03:f4:13:a1:
bc:14:5c:8e:ed:98:b5:0e:67:02:8e:ff:0c:de:df:
01:42:98:66:58:6a:75:4e:45:26:1a:25:28:8f:f8:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:7D:DB:D7:D1:D6:A5:56:5C:22:63:99:F6:DF:14:E4:C6:E5:2A
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e6:a4:31:6b:fe:23:86:26:b8:87:86:47:65:20:2b:2c:72:
97:43:73:94:9c:7a:3f:05:c2:7c:0d:2f:5f:2e:74:0d:66:5e:
e4:90:c3:5a:25:5f:0b:31:fc:8e:f1:18:8a:25:53:17:30:ee:
bb:dd:c2:de:97:f7:02:05:9a:bd:a2:6b:c9:57:47:0b:8e:23:
02:cd:50:eb:fc:85:91:09:1e:6e:c2:9b:d1:02:f2:a6:b2:90:
ed:41:3c:92:cd:a6:94:a4:c0:55:ef:94:41:e9:61:4d:db:9b:
7c:4d:79:c5:48:a9:ff:f9:f6:0e:74:27:c6:34:52:24:07:f5:
ca:cb:13:2d:e8:57:8a:82:ec:50:82:da:a2:81:4b:2a:49:52:
fa:0d:fd:c7:8c:53:8f:0e:ff:21:5e:47:a9:92:24:c0:d5:d4:
52:3f:06:6d:9f:5a:7e:b4:cf:d4:4e:04:a2:e8:f9:41:1c:ca:
b3:13:96:73:89:f6:82:0d:d3:28:8a:b4:b5:cc:0b:dc:b2:66:
3c:90:54:cb:73:50:29:15:13:46:6e:3e:0e:73:03:23:ea:8a:
e8:2b:bc:32:c9:2c:3e:b6:b7:93:08:24:78:af:44:44:fd:29:
ef:3e:93:b9:c2:2b:52:d8:22:f6:ba:fa:c7:84:16:f7:50:d8:
10:c2:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:23 2025 by rpki-client