Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: HDPdv6D2CVIId2twjHLCi9/I++YKiGYXBtXituCiHxY=
Subject key identifier: FF:5B:45:B4:AA:C0:74:49:10:32:32:64:CD:32:FB:35:45:46:4D:E5
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0197B77C45F577612C3F3AB666272946C445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 097B
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: 1Vtq5WEbIHVFXl5Txtrjb+1aKTe28gklBfNJHyjY6Zo=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:45:f5:77:61:2c:3f:3a:b6:66:27:29:46:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=ff5b45b4aac0744910323264cd32fb3545464de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:5f:ea:3d:5c:ea:b0:c4:08:38:fd:66:ba:
60:5e:69:52:ef:92:07:fd:5f:83:06:ac:f3:4c:cf:
a6:ee:07:61:d1:a7:9b:2f:f9:23:7b:cc:cd:17:12:
59:a7:c5:30:d9:1d:df:bd:22:9b:76:90:18:1a:bb:
79:c7:ec:2a:a0:6d:52:fc:fd:0e:4c:2c:45:a8:55:
55:5e:ce:31:59:76:e3:11:88:66:8e:0b:fb:53:a4:
a2:bc:41:c6:c2:85:b2:f0:96:d1:2c:7b:00:19:6c:
17:61:8a:1d:1f:84:4e:68:4a:1b:f6:5c:b0:09:9f:
a8:35:27:08:31:b3:3d:7f:cd:cc:76:c5:11:f5:1a:
0f:92:79:9c:a2:02:1d:34:57:2f:36:de:f4:e2:f3:
a9:00:84:56:2a:b0:59:a4:c6:3c:b0:01:e8:0b:18:
90:05:17:da:97:55:22:b3:f5:89:21:a3:be:ea:66:
b2:bb:38:8e:78:87:91:9b:32:93:31:04:bf:f0:f4:
64:28:cb:09:fd:b1:0d:6c:5c:44:c5:53:13:57:7e:
dc:03:c1:a6:3e:a3:45:5b:c8:f5:9a:52:98:5d:55:
e7:f1:d4:3c:c1:6b:c2:81:36:1b:ce:1b:21:ae:03:
4e:0b:3e:52:53:ca:0d:70:90:f8:da:97:60:f9:8d:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:45:B4:AA:C0:74:49:10:32:32:64:CD:32:FB:35:45:46:4D:E5
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:06:6a:0b:33:6c:95:98:d3:5d:30:52:f1:af:c7:d8:91:
47:85:24:bf:f6:91:df:3d:72:24:1b:c1:47:ce:51:9d:56:39:
8a:be:d3:42:cb:ef:92:b5:c3:34:b3:e4:b2:2f:de:67:6c:d2:
84:69:c3:c2:b6:bb:a2:d5:fe:ad:e0:4a:40:03:e1:15:5a:9a:
85:cb:28:8a:20:ba:fc:10:3a:4e:46:ec:2f:c7:2c:88:bd:fa:
7a:3e:1d:02:11:a8:55:f9:fa:77:9a:1d:bc:3f:5a:f8:1c:9a:
81:0e:4d:85:a8:61:56:2b:45:43:20:c5:f2:f5:4e:3e:77:6e:
b4:c5:90:cd:35:9a:1c:a8:c5:5c:d3:1e:de:86:10:3d:01:9f:
e5:dc:75:57:9e:f5:84:68:c8:db:f9:19:89:c9:d7:1f:35:c7:
7a:e4:99:e8:3f:5c:7c:8a:4b:b4:7a:71:83:12:65:57:de:32:
13:0d:e6:35:9d:22:46:44:64:c9:5e:61:8d:80:95:8d:98:dd:
a3:8a:48:ea:08:e3:95:5c:b0:cc:a2:a1:d8:67:3a:f5:1d:9b:
58:6a:b2:54:d7:53:68:0f:2f:07:ce:ea:b5:05:18:3c:8e:38:
29:42:bc:d5:12:3f:7a:f3:9d:08:23:05:b7:c1:0b:b9:0a:ba:
fa:b0:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:26 2025 by rpki-client