Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: FZWFZHBksd/nhLDi1D185UeOlBJesBqBUzD9tzk5Fj0=
Subject key identifier: D1:70:35:DE:24:CC:04:8E:A7:9B:1A:E8:22:0A:C9:23:E4:EB:0E:96
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 0197B7B3695987FDA3545604CF3759661832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0D7B
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: yKC3V/THiOlWWM2Ocoy1lPbhBLdB/juSW56RJj12g+Y=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:69:59:87:fd:a3:54:56:04:cf:37:59:66:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=d17035de24cc048ea79b1ae8220ac923e4eb0e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:68:9b:a6:c7:80:51:e8:40:83:2d:9c:a8:
3a:bf:b8:58:03:77:8a:be:95:24:54:05:09:91:d4:
f5:ad:89:0c:af:1d:cf:9a:d3:89:c9:84:8b:d1:e8:
ad:0b:68:6b:9c:a9:ec:98:4f:fd:33:49:e2:7d:d5:
59:a4:3e:76:07:a6:a2:70:a8:67:e8:a4:37:13:a4:
78:62:ab:4c:ec:cf:b5:ed:a4:99:38:a4:16:15:a0:
a7:75:23:63:7f:ae:92:54:6e:40:33:86:32:7d:9a:
ee:1f:05:07:4b:a0:d6:f5:79:18:f9:d3:4c:a1:2a:
68:65:17:b7:3e:02:2d:c4:e3:67:55:53:65:0a:73:
be:43:ca:1b:32:29:75:0c:a1:f1:12:74:6c:ff:76:
3f:a0:3d:0c:90:32:b0:7e:21:52:c0:4a:8d:7d:aa:
2f:7d:f4:41:39:95:99:b3:91:19:61:1a:d5:16:f2:
4c:71:2a:d8:c4:ec:df:26:e4:70:1b:26:12:4e:bd:
ab:f7:3f:0c:e6:f0:79:ad:8e:ed:2f:f3:1b:d8:f8:
8b:4a:d1:33:53:56:87:5c:ce:24:d1:65:7a:d2:63:
e3:4a:be:90:31:63:05:2e:e5:9b:98:4e:cb:f2:ef:
17:e9:f5:0f:49:7a:70:c8:b0:15:1e:a4:ea:fd:65:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:35:DE:24:CC:04:8E:A7:9B:1A:E8:22:0A:C9:23:E4:EB:0E:96
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:6c:72:8e:51:1b:f2:7d:28:a2:32:ea:09:69:e4:4c:ce:
61:c7:d6:a0:2b:24:cf:80:d1:c8:fc:80:6c:81:33:25:c6:2a:
6b:0b:92:81:dc:d7:e5:54:8c:43:83:0c:d0:8a:cb:1d:6a:03:
08:a0:57:1e:39:95:f9:d7:01:da:c7:74:fd:fc:cc:20:0e:ef:
d8:1f:93:e5:7d:8d:4c:60:73:f1:4b:a9:18:c6:83:ee:0a:72:
dc:51:7f:f0:48:57:d3:b4:36:ba:0b:d5:6a:2a:78:ad:94:b1:
5c:98:42:4e:31:d9:0c:7d:ec:a2:87:29:54:79:f5:b2:d4:4d:
74:59:59:2c:71:da:a1:59:cb:3c:86:56:bf:05:20:73:a5:8c:
83:96:b4:d0:11:3c:6f:93:20:2c:57:a0:ce:7e:78:30:60:bd:
fd:07:92:47:4e:75:de:81:bc:cf:10:8f:8a:ec:72:bb:72:5f:
95:b3:08:42:45:05:68:be:ea:a9:e8:25:4a:20:22:ce:f5:4a:
d0:33:b9:e8:70:08:ec:19:ae:8a:87:2a:53:5b:c6:06:7e:d0:
a8:8b:20:a2:3f:13:a4:98:3c:98:d1:c0:43:84:47:b0:46:28:
31:44:7f:0b:5e:62:df:1a:7f:18:7c:af:14:d7:1b:42:b1:1a:
3c:af:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:34 2025 by rpki-client