Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: Ij747Yjr0EVRNmaDun9eJKh7cpZ0yNSufkfI7BZO3hg=
Subject key identifier: BE:04:85:14:18:CF:D7:EA:D8:F5:3E:4E:C1:96:AE:46:ED:FA:0B:E6
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 0197C493A9AEC9B0CB3231581CF5458BED3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 1023
Signing time: Tue 01 Jul 2025 06:01:40 +0000
Manifest this update: Tue 01 Jul 2025 06:01:40 +0000
Manifest next update: Wed 02 Jul 2025 06:01:40 +0000
Files and hashes: 1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=)
2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=)
3: AF6uSBXXjV8m6D8T1L1tDnPI1pQ.roa (hash: 5ngifaMxS9mhHVtoSr7d4Aq0k4gtgdDqeUt6H7Q6K9U=)
4: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (hash: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=)
5: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: duLhwUJey7+axrx6Kbr8gT7H2vOfZQm9LdU1+6jgqVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:a9:ae:c9:b0:cb:32:31:58:1c:f5:45:8b:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Jul 1 06:01:40 2025 GMT
Not After : Jul 2 06:01:40 2025 GMT
Subject: CN=be04851418cfd7ead8f53e4ec196ae46edfa0be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:eb:a5:64:25:b7:21:e4:e7:38:2c:4c:7c:
c3:23:03:0c:a0:23:13:d4:b8:7f:15:cd:bb:cc:b2:
7e:b7:57:7c:9c:39:e8:b0:1e:94:95:a4:54:3b:1b:
73:0b:74:bb:09:42:de:e8:6c:e0:cc:27:07:99:c0:
f8:c7:fb:b3:0a:30:a1:80:c6:e2:df:27:7e:dc:00:
db:22:1f:ae:e7:f2:5c:b0:fd:96:13:7a:3a:6e:a0:
fa:6c:87:1c:73:f4:cc:37:29:a6:66:23:36:4f:29:
e5:1d:5c:e4:4f:83:95:35:ed:2b:f0:89:00:92:60:
53:b9:89:7b:1d:4a:50:5a:c4:47:36:57:19:f6:67:
a9:e7:92:0e:6f:b0:52:0a:b7:b0:15:3b:17:33:0c:
5e:23:6c:cc:57:77:bc:9e:26:37:ce:26:71:7f:e5:
51:a0:2e:3f:6b:93:8a:e4:a4:09:81:f6:a1:4b:94:
81:da:8b:8d:1c:72:16:00:d0:82:90:f7:ed:98:8d:
d3:0e:ea:29:0c:9e:01:ed:5a:c9:67:62:a6:1a:98:
af:2c:b4:9a:a6:2d:b4:e7:54:f2:90:91:dc:85:9b:
0e:9d:a5:c5:eb:fd:6f:30:8b:bd:a1:85:91:82:8d:
b1:3a:79:fa:e3:2e:eb:cf:84:e1:4b:2c:8b:a3:73:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:85:14:18:CF:D7:EA:D8:F5:3E:4E:C1:96:AE:46:ED:FA:0B:E6
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:cc:e8:9b:ec:8c:d6:c9:f8:c3:eb:2d:79:2a:27:8f:ca:
2a:6d:b9:b1:ac:3e:fa:49:a9:e6:37:54:cd:22:38:62:10:68:
de:5b:bb:e0:1f:22:2b:f4:d9:db:9a:b7:00:c0:25:e3:4e:05:
7e:2d:05:43:c8:f1:fb:ea:77:b0:1b:23:8f:5d:85:4a:b7:fb:
07:0a:33:70:e3:95:93:15:f6:70:36:ce:3e:fb:1e:88:08:1e:
9e:c5:58:91:40:32:22:c5:5d:cf:57:b9:33:56:09:6f:f9:6e:
59:2f:23:9d:c0:5c:44:fa:84:10:5c:d2:ca:ee:38:08:a0:cb:
c5:89:a9:00:f3:f9:0c:de:e5:23:f6:7f:19:27:b5:9c:e4:ed:
72:91:ed:6e:e1:61:92:ee:2f:f5:bc:d3:cc:29:d8:57:59:d7:
b8:91:32:9a:82:ab:da:10:fc:dd:d7:99:b1:b3:87:dd:0d:fd:
a7:58:c8:af:d6:07:c5:d4:70:fc:46:be:c3:6c:ef:fc:f8:88:
68:8c:17:6a:30:1e:ef:54:eb:2a:db:07:24:12:4d:56:81:b5:
5e:08:a8:99:ed:90:88:92:74:53:7d:7e:78:7e:17:be:f5:66:
c9:4e:9d:5f:2a:80:1c:bb:b4:29:ee:fc:2f:47:3a:d5:58:a4:
fe:8e:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:47 2025 by rpki-client