Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: /+qrho9ZYuHhCwjyphDX/uYJCoxbcP29pehrBX/rAls=
Subject key identifier: 89:6A:B1:53:D2:B5:3F:C2:D2:67:13:8F:04:77:7B:57:6A:8E:D9:51
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0197B5C4CABA36E569BE290BEEBB68024ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 08C9
Signing time: Sat 28 Jun 2025 09:01:02 +0000
Manifest this update: Sat 28 Jun 2025 09:01:02 +0000
Manifest next update: Sun 29 Jun 2025 09:01:02 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: TX0kPL+fKrwewfkd3n+M6eTO0zJYozcQ1aApL5dRV3U=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ca:ba:36:e5:69:be:29:0b:ee:bb:68:02:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jun 28 09:01:02 2025 GMT
Not After : Jun 29 09:01:02 2025 GMT
Subject: CN=896ab153d2b53fc2d267138f04777b576a8ed951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:22:00:f0:89:8e:ac:52:86:8a:9c:85:41:
ea:0f:39:2f:5f:d5:96:fe:36:e7:7d:cb:6b:9b:62:
29:19:47:a8:07:de:86:10:6e:65:dc:e6:cb:15:b2:
85:c3:c6:0c:9a:d3:d0:a5:08:9b:34:c4:e2:69:7a:
24:ae:6c:cf:8d:fe:8a:96:6a:fd:bd:46:22:d3:38:
4d:3b:9d:0a:05:29:0c:7a:5b:ed:3a:a3:c9:6e:cd:
8a:26:aa:8b:c1:3b:a8:4b:81:8f:48:1c:da:c3:4d:
33:4d:d3:da:d0:c9:bd:b7:01:84:77:56:b3:3e:8d:
82:5a:fc:a7:83:87:bb:39:1b:12:a6:53:53:8f:1a:
20:e0:51:73:21:b6:14:c2:c7:58:c6:56:1e:84:5c:
0a:00:41:77:5c:cc:b3:70:bc:05:ef:9b:ed:35:bc:
49:4e:3f:cc:41:dc:45:a5:df:1a:58:d7:a4:f3:16:
9c:dc:4f:76:cf:42:bc:81:2b:b4:d7:0d:83:48:26:
a2:89:df:cc:fc:05:c6:80:89:5c:48:4d:46:91:2c:
db:d8:d0:5d:17:9e:04:8d:5d:1b:37:45:e7:61:2c:
58:81:52:83:ed:da:7d:7f:15:d7:6c:7b:5c:fe:2f:
25:a4:14:03:5d:b8:4c:ba:b4:c1:13:ce:0f:02:1d:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:B1:53:D2:B5:3F:C2:D2:67:13:8F:04:77:7B:57:6A:8E:D9:51
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e1:2f:08:6f:70:54:7e:cb:42:4b:17:54:a7:be:d3:75:11:
dc:4c:41:8f:ab:0f:b1:37:8d:15:82:46:d7:ab:49:66:27:bf:
a3:00:cd:65:ee:e3:ed:06:09:53:8e:0f:6e:82:d1:f5:76:a1:
a0:f0:41:c7:ac:5b:f7:30:68:86:d8:84:58:b7:5d:bf:7b:73:
31:d8:33:6f:5b:52:67:30:05:5a:05:83:60:5d:9d:a0:7f:c9:
a8:82:d2:e3:84:07:10:fc:18:0a:53:68:f8:be:9a:1a:ac:02:
83:c5:b2:ac:d8:f6:e8:3b:b2:a5:86:4d:9d:b0:ed:e4:fb:b8:
6e:aa:ae:5c:d5:b7:50:b6:5b:18:6b:9d:0f:4d:1e:88:89:33:
70:93:ee:50:f5:1f:86:12:b4:a4:f6:c9:1f:2e:fd:6e:c3:37:
0f:41:96:4a:1f:7d:ef:31:7e:4a:26:a6:67:e0:bd:f3:d7:5d:
58:90:b6:eb:7f:cf:cb:b7:02:4c:21:b7:fb:49:41:d3:db:95:
a7:af:c5:40:5d:7a:9e:20:c0:02:33:8b:55:da:33:12:34:f4:
94:d9:9d:7f:5d:ba:53:d1:b1:44:d2:d5:cb:f8:bb:3f:80:6b:
b8:ee:30:c2:50:94:dd:11:44:53:e7:6c:89:22:aa:a1:a9:1a:
0b:82:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:10 2025 by rpki-client