Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: eFEXhiEJCR4Vy1tPHPJTpMe1TFzZjj8lN5IqPrs+7Gk=
Subject key identifier: A2:9C:16:7C:BE:3B:76:A5:B8:6B:D4:A0:77:26:D2:29:84:ED:0C:35
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0197B7456B36F10E3DC219438515B35C7BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0237
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
2: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: 0wBFx201ctRzCO2AtZ8XL9xVDefEEg/ya4uBfwp/WkI=)
3: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:36:f1:0e:3d:c2:19:43:85:15:b3:5c:7b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=a29c167cbe3b76a5b86bd4a07726d22984ed0c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:98:c5:99:d4:e4:95:ba:3b:76:5f:af:15:
d6:49:4a:57:cf:87:fc:79:2c:cd:1a:6c:65:fd:8e:
a8:a4:8d:08:49:c9:37:b4:fc:ad:40:2e:df:16:39:
0c:43:88:74:41:21:dd:ec:8c:6e:65:dd:31:81:79:
4f:0e:d3:64:de:e9:3b:c0:9d:cb:b2:fa:17:b9:63:
60:9a:c7:24:6d:b1:57:5f:4c:44:d1:8e:1f:37:c6:
9f:fc:94:a2:69:92:bb:94:ee:7c:ce:be:9b:1b:95:
f1:52:97:65:07:7c:d4:a2:43:cc:41:da:63:6c:e8:
fc:4f:2d:b3:e1:11:fa:23:40:37:13:0e:5c:30:53:
10:28:07:4b:54:7d:ca:a5:19:c9:bb:1c:66:fd:62:
ac:cb:0a:af:84:de:ed:58:2b:fa:35:1b:1a:b8:6c:
eb:65:b1:55:a1:98:da:dd:14:18:60:cc:ca:74:f1:
70:3b:1c:3d:84:19:bc:46:e2:13:c0:c1:7a:28:bf:
af:2d:b6:6a:32:c4:f4:57:72:50:2f:8c:30:8a:b0:
b4:12:b0:60:8d:58:4b:71:cf:62:1a:76:59:b4:03:
63:83:44:62:42:5b:f3:b3:59:3a:a2:90:26:65:bf:
bc:c7:10:0a:56:97:d4:21:a9:98:c6:b5:e7:98:03:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:16:7C:BE:3B:76:A5:B8:6B:D4:A0:77:26:D2:29:84:ED:0C:35
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:27:9c:04:eb:ce:92:ce:f3:6f:ec:14:ec:77:97:b8:48:
3a:14:7a:c7:95:89:5d:70:da:c7:fc:f3:18:b7:35:93:29:2f:
b7:98:b9:6c:5e:8e:5c:27:84:81:13:e3:4d:dc:5f:be:c6:1f:
2a:32:e4:73:b5:3f:69:7f:c7:e0:36:3b:75:fb:d4:aa:90:b0:
a8:d4:1f:66:3f:77:d9:5d:d4:5e:65:66:a1:af:94:34:dc:f5:
88:50:60:00:e3:f4:6e:55:13:0b:b7:fd:05:72:c3:e2:cd:32:
9a:7c:24:b8:46:74:cf:f8:49:ca:36:a9:8d:64:a0:9b:7e:a4:
45:82:07:7b:c7:16:e0:39:59:4f:9f:f6:7a:e1:0f:b4:e7:4a:
97:b4:e4:0e:4b:53:47:f8:7c:23:fa:a6:df:3d:d2:5c:ff:65:
14:ee:89:0b:fd:9e:ce:c2:9b:45:41:44:3f:4c:39:54:9d:35:
e3:70:6e:47:61:71:32:26:91:ee:01:ec:e5:f0:34:88:08:eb:
8a:f1:7c:eb:5d:ef:82:e9:e8:50:60:1e:26:63:df:7a:2c:81:
08:81:9b:9e:c8:e8:35:6e:f3:4e:39:73:c8:b8:60:6e:02:1d:
d7:fd:61:1d:07:2e:ec:fc:6f:db:ad:b6:4f:fe:15:41:33:9d:
82:88:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:50 2025 by rpki-client