Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: Qgah2ED1/xK8DDqS1ZBT2w8wIRyyrJun7nkfi/JI9KM=
Subject key identifier: 39:01:43:C4:C4:83:5F:CD:F3:79:E6:1C:4A:34:A0:9B:0D:C4:9E:94
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 0198D51625281A863BA742D86F03F5584081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 0672
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: Sk0IZ+c3BR4VmGyPiEYDkMZKIlQ9y9E5e5p3dvz7My4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:25:28:1a:86:3b:a7:42:d8:6f:03:f5:58:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=390143c4c4835fcdf379e61c4a34a09b0dc49e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:51:10:d5:7e:7f:0d:d4:06:4c:12:db:fd:
ea:86:32:02:39:d1:e0:05:f6:0c:12:27:4d:b3:14:
9c:8d:8f:1a:bf:0c:57:5f:97:d2:47:5c:87:6c:4e:
ae:36:34:48:8f:58:5f:96:3d:7b:03:63:ef:15:e0:
13:ca:f4:53:9e:06:02:b9:34:8a:0d:20:80:d3:b3:
d5:8c:63:36:74:b4:7b:5a:d6:77:e1:35:4a:e7:d0:
f8:1e:25:d1:b9:1d:e7:29:20:66:03:33:7a:a4:5b:
0b:1a:42:d8:77:9f:a3:22:77:28:eb:20:f4:bd:97:
1a:98:1e:18:40:96:01:9a:a2:11:79:35:c6:d3:5e:
8a:7e:38:44:4f:f7:0c:cd:44:3d:66:47:70:18:00:
4c:e7:17:11:5a:92:d8:80:93:9b:c3:4c:f6:25:f1:
74:9f:74:b8:5e:4a:11:88:a9:f4:ba:b4:71:c4:db:
fb:ee:ac:ee:8b:49:77:d8:cc:ec:c7:34:e9:5e:58:
fb:21:4c:f6:07:4f:90:58:7b:c3:d6:ea:25:a7:f1:
c1:ac:92:c3:49:74:c5:c0:cf:20:cd:e2:2d:21:b9:
85:bb:04:ca:26:86:86:52:13:65:b2:17:23:ba:5e:
93:49:7e:27:50:7c:bb:e5:06:0a:72:ee:fb:09:a2:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:01:43:C4:C4:83:5F:CD:F3:79:E6:1C:4A:34:A0:9B:0D:C4:9E:94
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6c:0c:c0:14:e5:a2:00:e8:dd:8b:51:7a:e3:46:12:8e:56:
b3:4a:09:f8:1a:bb:89:c1:a4:d0:f5:22:34:3b:c6:73:a2:69:
8d:b8:eb:42:88:21:01:be:b4:11:f8:32:4e:f1:fc:f2:9a:91:
9c:ea:9f:06:a5:d1:af:02:54:8e:e1:6c:e5:30:7d:9c:5a:3e:
93:ac:e0:28:0b:c9:75:1f:08:5a:55:a3:85:a9:52:94:5b:4c:
bb:f8:0f:d6:c0:fe:16:41:8c:dc:51:5c:ca:d0:b4:73:91:7a:
7f:fc:d3:0a:4d:c3:66:fd:70:31:6d:9b:80:86:10:02:b1:20:
bd:5b:41:10:1e:29:8d:66:31:77:f7:bf:50:a9:c9:27:42:3f:
29:8d:de:80:a1:4c:34:d3:33:ce:b9:dc:85:a1:cf:6d:d1:d1:
11:5b:b7:85:f4:70:74:f6:a1:f5:e0:ec:88:b8:84:ce:0e:1f:
73:f8:1a:3c:b1:12:40:f6:ad:5f:bd:ed:42:46:d9:13:3d:70:
d0:da:b3:88:a9:3f:1d:18:9e:9b:ff:c4:6f:cb:a9:7b:be:be:
0f:55:6b:72:be:82:9b:e2:95:53:3f:04:f1:60:a7:80:fc:e7:
ff:36:e0:df:51:e9:4a:2d:24:7b:12:94:a1:80:77:b5:23:51:
c0:fa:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:06 2025 by rpki-client