Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: kCXkunPK5LIT+TFEYQ20OqANt7sIJZg76kk5KNXaaf0=
Subject key identifier: 3C:ED:4C:1D:D0:17:80:09:60:B2:DC:C8:31:E8:F8:96:65:FE:19:E1
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0198D583A3B43EED36F1DC79C149444EAFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: spYkHzfALJ909LJyuyHkmv4dZKmCdTsIyn7DADAWTs4=)
3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a3:b4:3e:ed:36:f1:dc:79:c1:49:44:4e:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=3ced4c1dd017800960b2dcc831e8f89665fe19e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:61:56:6f:20:52:57:53:96:01:0f:04:8c:
cd:fa:5f:86:28:19:27:72:38:5d:df:b5:32:bc:65:
50:27:af:d4:09:6f:db:06:98:84:49:b6:36:47:2a:
1e:ca:a2:43:a1:47:95:19:a0:57:9e:e9:d3:43:e4:
17:c1:57:50:e1:81:81:64:48:25:3a:97:a8:e7:90:
db:4c:e3:4a:38:d7:a1:27:28:61:8a:14:bf:4b:d3:
f9:1a:09:4a:dc:bc:be:58:19:4d:e4:f6:12:48:92:
fd:e2:f6:f4:0c:92:8e:cb:d3:94:5c:23:ed:cc:91:
22:47:2f:b9:58:9f:10:60:01:83:07:6e:02:6a:1c:
60:61:e3:a7:f5:53:87:f9:6a:8f:3e:57:18:d3:6e:
c1:ce:fc:95:83:57:67:bc:9e:95:73:03:5c:87:aa:
19:57:02:02:af:e2:89:6d:9c:61:91:ab:2c:93:51:
bb:e5:fa:22:c5:a5:ad:75:29:93:45:9c:c1:e5:aa:
58:52:3d:fc:17:a3:4f:38:77:a4:95:f5:71:de:c1:
ba:1c:32:d8:57:86:8a:13:ea:b1:60:50:f8:56:ee:
41:1e:77:84:cd:af:f4:01:0b:53:dc:cc:56:cf:cd:
d8:29:f1:04:a3:a8:ee:c4:6a:87:5d:ea:11:d1:17:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:ED:4C:1D:D0:17:80:09:60:B2:DC:C8:31:E8:F8:96:65:FE:19:E1
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ef:3b:07:f8:f4:18:8a:55:7d:e7:91:3a:eb:13:e7:0b:b7:
c5:be:95:03:81:e7:15:d5:b4:1b:54:c4:2a:e9:0b:d5:eb:be:
21:c4:4f:8c:13:2d:c3:45:11:a7:87:de:dc:06:b7:ba:07:c0:
de:1c:2d:fc:a1:07:33:0d:60:a9:1c:c6:2a:c8:c4:6a:3f:9b:
18:11:ca:06:e1:c6:1b:56:04:7e:8a:d9:97:da:ca:a9:a4:92:
84:f4:12:3e:8a:bc:af:a6:68:51:d8:c8:ed:3b:dc:4c:fd:59:
2b:a7:f9:ba:dc:1a:d2:a7:6c:4c:f4:e5:d8:83:39:b0:12:34:
9e:c1:6e:93:c2:7b:45:c8:f0:57:62:9e:84:14:bc:1a:64:73:
d0:d2:98:cf:8c:6a:cd:0d:f8:4d:98:26:81:96:e7:ae:83:3c:
f8:a3:c8:51:9a:48:93:77:75:8b:9f:6c:81:ef:90:d7:00:41:
fc:4c:1f:b9:b2:d5:ed:a7:ae:b5:a5:7f:bd:f9:04:21:05:2a:
ed:70:58:32:e6:3c:3c:cc:c0:09:94:f8:13:62:7c:4e:a5:cd:
03:f5:a7:4d:50:7d:e0:bb:09:45:6e:4e:6f:35:e8:b9:0e:eb:
f3:8d:ec:d4:98:3b:7b:bd:6c:96:bc:ff:8e:11:d3:be:ed:0c:
0d:57:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:04 2025 by rpki-client