Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: 8dsBp5OQlmQ0ckDS4HMCHxHEP2vKSj1MI0xw+eH9890=
Subject key identifier: A2:8E:0C:45:91:B9:D3:24:1B:7E:E2:88:CF:C8:7B:1F:EB:8E:3D:E7
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 0197B74578AE1BAE34B060EF98D70342DD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0AAF
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: OP+AUPsAsyl2SrA7U4WsID18BJtrdpunzWWIqhs9Gs0=)
3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:78:ae:1b:ae:34:b0:60:ef:98:d7:03:42:dd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=a28e0c4591b9d3241b7ee288cfc87b1feb8e3de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:ea:9e:bd:67:cf:5d:ac:dc:f9:25:dc:58:
36:64:64:00:ec:d2:91:68:25:2c:37:75:45:0a:e7:
8b:ee:53:7e:4d:c4:37:87:b0:63:42:15:21:65:09:
7c:ab:09:b2:40:9b:74:e4:19:d8:9b:ea:e4:b0:40:
c6:33:fb:ac:b1:87:11:e1:bc:1f:5b:d8:5e:64:0e:
5f:d2:63:22:9e:ce:50:7a:d8:77:c7:68:b8:04:31:
51:46:5a:dd:a0:d4:b1:c7:76:f0:ac:d9:c1:15:41:
4e:62:d6:1d:23:e9:e2:5f:4c:b8:60:b3:db:27:dc:
e6:20:b4:b7:1a:e5:e0:cd:d5:4c:17:65:6e:6d:2d:
b9:66:99:27:39:c3:eb:fc:dc:42:dc:ff:2e:59:00:
88:c3:08:b3:9a:32:ca:59:96:b9:ac:d7:b6:1d:a8:
0c:64:7e:7f:17:e1:0b:af:1b:83:a0:20:78:e8:91:
1a:4d:c3:c7:fd:9c:0b:27:84:ff:e6:76:96:46:97:
0d:61:49:db:ee:25:ec:91:30:48:51:84:72:85:c0:
e8:a1:2f:e2:3a:16:87:4c:3a:b8:bf:3d:e9:8f:08:
3f:31:04:3b:36:57:eb:1f:cb:60:3b:30:0c:8d:ce:
e1:56:3a:9c:86:72:6b:a3:20:79:47:4f:61:9d:84:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:0C:45:91:B9:D3:24:1B:7E:E2:88:CF:C8:7B:1F:EB:8E:3D:E7
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:b8:8f:4a:e9:ce:7d:4e:92:18:be:0a:9d:5d:7a:34:e6:
2b:17:f5:a1:cf:21:ed:81:81:b8:23:62:a1:36:b2:01:3c:56:
99:0c:53:9a:b3:53:1e:53:49:26:aa:7e:bd:da:66:9f:95:39:
a0:2f:01:ca:9b:60:10:27:ff:93:9e:87:08:93:e4:7d:b5:78:
79:46:8f:6b:d6:8f:ca:a5:9e:06:ac:5a:d5:dc:53:54:54:8b:
0d:fa:40:24:f0:65:21:7b:6e:b4:12:24:6b:76:a5:2f:08:fd:
57:4a:da:ff:1f:76:f2:68:ae:95:9a:b7:ce:da:d3:90:dd:be:
3f:eb:5a:34:6b:c8:c7:ce:17:5a:03:f9:0f:09:c0:70:7f:39:
ec:82:9f:14:60:59:c1:37:49:6f:ca:85:d9:61:e9:49:37:58:
f0:bb:c8:c8:29:22:8d:8a:14:72:7c:56:19:d9:03:83:cc:58:
77:ef:47:ec:42:70:68:fd:2d:c4:1d:94:50:b1:1a:ac:5f:3a:
1d:d8:f8:e4:a7:7d:45:36:fa:e7:32:88:c5:4f:53:21:a7:3f:
74:34:cb:ec:a0:97:39:5d:12:38:10:b3:50:32:1b:51:ed:43:
7a:5c:47:21:ef:f8:4c:4b:e5:c3:6c:3f:6a:cf:78:69:44:56:
e3:3c:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:53 2025 by rpki-client