Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: LG8BUuNMCOWmIbyILYtwr7vUBLgSWB2Jdf0Cr00YjV4=
Subject key identifier: E5:D0:2B:FA:E8:1C:2A:73:22:B1:37:39:41:5E:01:00:D1:45:59:1F
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 0197B70F2BBD5AF2A55B579DDA73D0021978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0A36
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: YXug8kW/AJUWQ4coXeCVI0FYlbk4GJ0+mNEq54AHA3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2b:bd:5a:f2:a5:5b:57:9d:da:73:d0:02:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=e5d02bfae81c2a7322b13739415e0100d145591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:19:c3:8a:3d:30:bd:5a:ed:38:ec:36:83:
5c:da:24:42:23:94:b1:56:3e:42:08:e9:08:e5:15:
bf:49:71:43:bd:31:2b:ee:b2:e2:fa:1d:2a:f9:76:
23:8a:eb:14:30:9e:b3:1e:b6:64:9d:17:ef:42:83:
5b:1e:d6:50:61:49:f2:02:b7:aa:09:b2:47:a2:bb:
d0:bf:92:4c:ad:69:e1:bc:7b:5d:2a:10:1d:3c:19:
ff:e9:48:ac:da:57:12:de:c3:73:c3:2c:56:49:d8:
02:12:6a:34:c1:4a:c9:46:c7:cd:69:30:14:7c:a8:
27:61:37:d6:e3:7c:09:52:28:13:b9:8a:e8:4d:d0:
b2:ef:49:66:b0:46:1b:a8:21:02:45:cd:c6:f0:21:
b8:0d:c8:84:97:85:1b:25:57:ac:b3:f0:e9:75:5c:
d3:d0:a6:1c:77:0f:7e:ba:4f:32:6a:0d:77:90:c2:
94:b7:87:da:ae:bf:42:00:6b:c4:d9:42:f1:7e:2e:
ab:62:4e:b9:7c:69:f3:12:eb:80:7a:8a:0e:7f:1d:
71:5c:ed:9a:55:b2:0b:43:09:2c:6c:e5:65:69:61:
98:83:9e:03:3f:33:dc:ec:ff:da:ba:57:63:a7:b0:
91:12:ec:62:34:4a:10:a6:4b:db:3d:27:97:17:f3:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:2B:FA:E8:1C:2A:73:22:B1:37:39:41:5E:01:00:D1:45:59:1F
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:79:96:25:ae:c3:2d:fd:8a:63:88:d4:50:ea:19:1b:e1:8a:
a8:f5:e1:2a:95:f3:e3:da:bf:60:31:3f:fa:b8:f0:c8:b0:ce:
3c:6c:38:2c:47:4e:1a:0a:b0:f2:e7:08:cf:80:25:05:f1:a6:
89:f2:68:03:04:10:9f:46:a6:fe:15:e8:70:02:14:78:3b:d9:
4d:dc:f6:2e:09:b7:9d:62:5f:a9:47:3d:9c:40:55:38:1f:72:
eb:d7:76:ad:ed:b5:8f:32:da:4d:48:4c:f8:e4:37:0c:93:ef:
fa:04:f8:7e:f7:56:1f:49:5f:cb:87:f7:25:72:3a:53:ec:7d:
44:6b:36:21:24:e6:e8:e0:b7:fc:8c:c9:54:bb:b7:62:e0:f7:
64:e6:d7:4c:27:83:1a:61:26:31:c4:eb:b7:5b:84:9d:53:c6:
0d:63:5b:72:88:d8:9c:dd:09:5e:f8:a6:68:11:00:72:93:1f:
69:3a:d8:e6:03:ed:cb:b1:44:12:83:17:b9:42:f0:4f:49:1b:
5c:1d:dc:d0:86:23:5d:1e:0a:c6:00:90:44:53:17:03:18:28:
65:63:a7:53:00:6d:81:7b:ce:14:91:70:da:65:b8:62:1d:3c:
b0:53:9b:73:16:41:46:40:0a:9b:79:67:b2:ae:24:f6:a6:b8:
09:c4:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:55 2025 by rpki-client