Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: d3D680vzQR3KOJWtgotrxx0/gZqJ1HwsgGeI4PYfXOs=
Subject key identifier: C8:C2:7C:89:2E:82:C7:CB:92:67:EC:47:AE:7D:CC:D5:1F:AF:CF:27
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0197B745659E452C2F6EDB9B6794D1D66E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1239
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: QUaiivJh1sCDiQnWy9h9JSKDMMhtikWXw5ho12gv2rk=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:65:9e:45:2c:2f:6e:db:9b:67:94:d1:d6:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=c8c27c892e82c7cb9267ec47ae7dccd51fafcf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:e2:8d:b1:f1:66:80:01:93:6e:1d:7c:e0:
08:94:94:36:02:bc:4c:35:d9:03:48:dd:fc:37:5a:
9b:5e:c5:c8:80:bd:11:e8:76:ac:a4:cc:fa:c6:84:
4d:38:3d:3c:4b:fa:60:53:53:23:7f:fd:b8:32:b0:
c2:77:b1:17:1c:08:7a:41:19:e3:8f:55:88:90:1b:
7c:11:e4:c4:3d:e4:e2:eb:6f:83:57:78:84:4b:55:
d8:00:30:5e:83:1f:f6:50:8f:22:32:62:ee:10:33:
cd:a3:d9:46:1d:3e:ad:fd:be:e4:f8:ee:60:8d:46:
9b:51:12:41:6c:32:49:21:84:c3:40:dd:1e:64:05:
66:46:8f:f3:e8:96:f0:8e:0a:09:11:91:f3:7b:e5:
c3:2c:78:40:23:d5:bd:9b:18:79:ad:66:08:b5:52:
d1:e9:e6:71:cb:86:c7:3b:17:55:dd:df:a1:34:6a:
a9:ff:1a:0f:af:39:96:df:89:97:3b:5d:69:f0:dc:
d6:b6:4d:6c:9a:f5:e7:43:85:5c:49:13:91:7c:d9:
35:a1:42:5f:be:c3:4c:88:c4:df:d8:4f:e2:a8:1a:
73:68:73:40:c3:96:ab:f0:14:b4:98:14:62:39:e4:
82:2f:82:6f:32:57:79:97:90:2a:58:f3:b6:7e:36:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:7C:89:2E:82:C7:CB:92:67:EC:47:AE:7D:CC:D5:1F:AF:CF:27
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:81:ee:20:81:5c:c8:fc:06:47:8e:44:d3:2a:33:2a:fd:ad:
d9:67:5a:84:e0:5e:2b:29:b9:30:9c:a7:ca:c6:d3:0a:c9:85:
bb:2f:61:f8:93:01:ca:9b:34:94:06:8b:97:ea:ab:0e:55:81:
5d:b9:3a:97:b8:51:f4:78:c5:68:6d:91:84:e0:db:56:f4:62:
df:79:c0:c8:a4:f0:5b:48:77:83:8c:40:7f:02:2e:b7:ac:34:
8f:52:b7:c5:cc:ad:9a:ee:04:9a:d8:f6:c6:00:c1:7b:a6:bc:
f9:76:5b:da:1d:7d:66:07:dd:b5:cb:db:79:31:85:00:67:af:
06:07:dd:8c:37:71:38:a2:92:df:bc:17:4e:f3:86:8c:b7:23:
a8:c8:5d:c0:eb:87:08:90:ff:f1:00:b8:46:2b:2e:26:4e:c5:
db:75:5a:55:50:6c:00:5c:52:c9:3f:7f:f7:ae:93:ab:05:aa:
02:29:16:67:74:38:82:fd:0c:ad:71:6b:e6:e2:f0:7f:c6:e7:
61:93:9a:00:c8:cb:bc:f6:1c:a0:d4:db:f6:ed:4c:a8:44:21:
c9:52:8c:c0:47:6f:f8:f6:cb:c5:25:d9:66:08:4f:cc:32:80:
04:c2:ea:e9:b7:a4:fb:12:8e:1a:55:26:ee:7b:b5:1f:6d:71:
71:0a:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:04 2025 by rpki-client