Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: UxdfaK14Lxaxazuy4pytwXDeJXzqxv9fcP0tUfgi5UY=
Subject key identifier: 94:E5:0D:0A:AB:13:45:11:C9:20:D9:86:B2:26:B9:13:E0:C2:5B:E5
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0198D7733210C1C8A1A02145F13AAEAC3B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 095F
Signing time: Sat 23 Aug 2025 15:01:47 +0000
Manifest this update: Sat 23 Aug 2025 15:01:47 +0000
Manifest next update: Sun 24 Aug 2025 15:01:47 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: h9a69RQIw77gm0akp6PQ4PPzVGsUV5gm7Kj3gdQjCbw=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:32:10:c1:c8:a1:a0:21:45:f1:3a:ae:ac:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Aug 23 15:01:47 2025 GMT
Not After : Aug 24 15:01:47 2025 GMT
Subject: CN=94e50d0aab134511c920d986b226b913e0c25be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:c3:f9:b8:96:62:fa:24:d8:52:2d:1e:ed:
c1:c7:77:b1:a0:7d:f6:61:0b:04:da:26:ee:8f:12:
67:d9:71:85:06:78:79:c1:27:fc:ad:b2:7a:ad:cb:
ed:4f:ff:8c:87:2b:4c:64:a4:89:71:ba:d8:62:d2:
33:4e:ee:a4:cd:dc:db:32:96:b4:02:60:9d:3b:3c:
93:e5:c1:5e:56:83:95:22:91:72:ae:ae:88:be:4d:
92:10:84:2e:3a:31:46:94:c6:33:d6:6b:57:27:76:
84:b6:05:3f:8c:6d:b0:c7:db:44:4e:11:9f:bd:df:
61:c5:07:bd:a3:d9:e4:81:1a:33:1a:92:92:8e:0a:
94:eb:de:04:9e:69:6c:c3:e2:2a:09:d0:df:74:3f:
6b:ae:45:ef:fd:2b:59:27:ac:0a:42:81:35:6b:2f:
cd:27:c7:72:c9:79:09:cf:fc:8a:aa:dd:e1:1f:5d:
b4:25:77:4e:dc:56:b1:e7:66:8b:0c:d8:a4:52:93:
bb:70:7a:4c:7a:b2:ee:95:18:24:8d:39:fe:b0:ed:
22:f9:a9:c5:ed:46:d3:3d:ce:69:78:65:fd:a9:a6:
a8:9e:41:59:33:f1:29:c3:fe:1d:d6:51:73:7b:fa:
4d:24:11:5b:61:74:fc:a3:16:df:1a:62:87:70:42:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:0D:0A:AB:13:45:11:C9:20:D9:86:B2:26:B9:13:E0:C2:5B:E5
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:94:1d:ec:4d:a0:a1:6d:c8:03:b5:e1:88:0c:34:60:22:e7:
0a:13:3b:8c:ee:a7:a2:d1:c5:4d:b0:61:62:9b:e8:fa:65:f1:
ba:b0:56:58:5c:61:1b:3f:d7:5d:c1:4b:49:ec:13:97:d4:5d:
b8:10:9c:f8:8f:3e:81:5e:fe:94:b7:c2:49:b2:83:f1:52:42:
2d:9a:91:a2:f0:9c:d5:1d:51:fb:7e:7b:a7:44:76:73:31:d8:
86:49:e5:cb:c7:ef:28:8b:90:88:87:37:e3:09:50:4c:cf:a3:
6a:9b:41:89:8e:38:4d:4c:f9:2e:67:3a:1f:e1:47:75:df:46:
4b:5e:d7:76:c6:46:28:67:09:7c:70:c9:f3:20:c9:75:c3:a7:
c9:24:6d:52:30:b0:b2:78:9f:ba:56:59:32:e2:bf:3e:be:d3:
85:b8:d1:96:12:c9:f0:ca:d5:15:73:72:f5:b1:ed:95:82:98:
31:5d:1b:9c:fd:f0:03:39:01:b7:4a:0c:4b:c0:b3:9a:3d:66:
f1:6a:cd:d9:c9:34:e0:13:96:cb:22:d7:e4:16:a5:45:c2:88:
00:16:40:9e:f1:8b:f0:e8:67:2e:00:7b:61:ed:35:f8:f3:1a:
f4:b0:f8:26:71:1d:d8:d0:03:b5:90:c1:ff:0f:2a:fd:3e:7d:
9c:57:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:21 2025 by rpki-client