Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: sFFXF0hp9WzbHfEJUyh/8xXkoUPID7WdDgi792z6j4k=
Subject key identifier: 2E:CC:83:96:2F:91:BF:79:28:32:00:C1:71:C0:14:F4:8D:78:8D:BB
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0198D5162339926914F17479C100385DFB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 085E
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: ly/NXzAmRN5QkQW19qaT9hQdpBVGnH9eMfWrpV0jwDo=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:23:39:92:69:14:f1:74:79:c1:00:38:5d:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=2ecc83962f91bf79283200c171c014f48d788dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:88:2a:fe:b3:6c:b9:e8:af:90:99:a3:80:
90:94:6a:42:fe:3e:19:11:b5:db:bf:54:58:dd:1b:
89:3d:19:85:c9:aa:e6:d7:be:c8:aa:92:6b:1b:ef:
7e:98:19:29:c4:28:ab:fe:7c:6d:77:7b:2f:f8:64:
80:84:e3:17:fa:cb:71:53:7d:2a:7b:4e:a7:12:a3:
4e:07:71:04:64:31:f0:9d:c5:ee:99:11:7b:29:62:
5b:e7:75:a8:a0:67:67:dd:fc:d0:8c:46:d4:c8:3b:
d4:4b:d9:15:46:76:2e:8e:6f:1d:0b:2e:5d:e5:66:
bb:87:31:d2:a8:da:be:a0:63:cd:b0:a9:38:1d:0f:
c3:c6:56:3d:b3:7c:5d:a0:00:d9:3f:92:fe:57:47:
db:5c:03:fd:57:0c:a5:11:e7:cd:4b:04:f8:21:21:
26:8f:3e:d2:7c:1f:67:6f:5d:81:44:26:e3:b1:be:
89:04:3a:5b:dc:d9:5b:d6:bf:f5:1b:7b:7b:0f:07:
13:3a:7c:4f:1d:76:c3:a6:08:1f:75:cd:8e:e5:9c:
a8:83:77:74:29:92:e5:4a:c4:01:7e:d8:83:a5:0b:
77:00:e8:8c:e8:87:bb:67:42:64:f0:b5:77:06:8d:
e8:6b:9e:1a:0a:70:f7:71:14:8c:c5:1f:1e:a9:73:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:83:96:2F:91:BF:79:28:32:00:C1:71:C0:14:F4:8D:78:8D:BB
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:10:fd:b5:9e:c9:bc:a9:95:fd:6b:d1:f2:a5:a2:dd:72:
20:a6:d1:5c:a0:93:a7:47:96:cc:81:f4:cc:9c:c4:d4:71:ba:
45:fe:63:01:f6:34:6e:30:df:ed:32:85:1f:06:17:55:81:c3:
7a:85:23:a9:ce:48:97:53:e8:be:ce:9b:1b:a1:34:c2:df:05:
63:ff:ca:46:83:69:bc:9d:92:b2:36:9a:d8:52:d1:24:eb:00:
f1:f8:4f:15:4e:d6:00:69:5d:1c:72:a7:d3:d7:13:7d:d9:ab:
4c:6d:a8:61:cb:c7:f6:02:30:f9:69:dd:09:b0:b5:fe:07:06:
5d:92:5a:ec:19:14:5b:4e:e5:af:cc:6c:a3:d1:c4:5d:a5:b3:
e7:3a:e0:6a:10:9a:46:cb:25:3b:83:ed:57:b2:f3:e7:0f:fa:
fd:ac:22:79:79:bf:9c:ce:40:18:58:c8:16:cb:5d:bf:d3:b9:
55:e6:92:2c:11:c5:70:25:2b:85:67:47:3f:3c:2e:97:f1:0b:
19:5c:01:5a:95:29:65:4f:e4:45:32:94:27:27:b2:f7:47:15:
5f:fa:4c:dc:5e:ad:94:1f:fa:e4:33:55:e3:7e:5c:6c:7d:1f:
81:db:98:af:d7:03:d3:4f:d7:a4:29:da:b7:98:20:9c:ee:d1:
8b:3c:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:10 2025 by rpki-client