Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier: Wpw/kC6kx3a8iCNPAnc1cklkzLMSy5HFMBgVdZo7KXQ=
Subject key identifier: EF:85:DC:52:7C:B8:64:AA:56:0A:C0:5D:93:52:C3:78:4E:3C:2A:27
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 0198D6CD3D0258127A58FBD75161C0676B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: 1RPjHDR0KTRRTrnADNPX/RQLv4CZBoVaDptQhD4/mS0=)
4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3d:02:58:12:7a:58:fb:d7:51:61:c0:67:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=ef85dc527cb864aa560ac05d9352c3784e3c2a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:35:6d:a3:f8:eb:00:45:72:07:ba:62:b3:
ac:65:5e:84:c5:bb:60:c2:57:c9:cd:ca:09:f1:80:
13:03:6c:d3:99:1c:e0:79:ad:8e:b0:9c:d9:15:11:
55:8f:21:a2:c6:de:d8:53:4f:f4:a6:c5:09:2d:3c:
c8:4d:f2:0a:e5:b8:27:fa:7a:0d:08:b1:75:01:b7:
f9:91:99:70:46:3d:b7:46:23:95:d8:7f:7e:b8:7d:
85:ee:bb:84:46:39:7d:57:d4:75:bf:15:72:49:53:
21:9a:10:87:c0:7c:d8:1c:cb:4a:62:60:3d:bb:fd:
9b:b7:3f:64:62:e8:43:fd:e1:ab:f5:07:fb:74:be:
42:92:b9:3c:69:c0:0b:b9:e7:e3:ad:cb:f9:b5:4a:
ad:69:77:7c:6c:9d:0b:0b:53:3f:4b:d2:a3:71:83:
dd:65:76:15:2e:d2:b7:37:de:f9:f0:fe:af:c9:2b:
8c:35:d4:95:4e:af:db:fb:d3:d5:55:b6:b0:ea:a2:
f2:7c:dd:06:86:21:e3:1b:e8:28:fb:98:5c:82:6c:
98:5d:f8:71:ec:d2:a0:8b:7f:03:4d:57:f4:13:d6:
b3:b1:ea:4a:7e:59:c6:4f:ac:2e:4f:0d:7f:36:f7:
c4:92:c9:6b:28:00:4f:78:53:02:f7:93:13:9b:00:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:DC:52:7C:B8:64:AA:56:0A:C0:5D:93:52:C3:78:4E:3C:2A:27
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:15:9e:0a:0e:46:96:66:46:92:39:c1:6f:a0:bc:ca:eb:
9e:a7:22:a5:4e:61:f1:0c:f3:78:56:ad:78:66:53:b6:89:8e:
68:63:1f:61:d2:cd:41:8a:07:3d:7c:07:98:d8:ad:f6:a0:bc:
b6:0e:e9:16:25:4c:a0:7e:2e:13:7b:a6:89:fe:44:bc:0b:3c:
b7:ed:41:9f:6d:10:85:68:36:fe:1c:15:9a:6a:82:29:76:fa:
40:42:35:05:cb:f3:a6:8a:55:cf:49:6d:68:2c:06:4b:e3:f3:
96:a1:b1:cc:01:c4:d4:dc:4d:cd:e6:1c:5c:a9:2a:4b:ca:71:
fd:20:43:c0:b0:8c:30:8b:db:2a:9d:ba:9a:5c:70:17:e5:5f:
1a:3f:80:98:c9:af:26:73:5f:7e:0a:3c:51:e3:e1:1a:c1:ef:
de:f9:8a:6f:84:75:26:7a:5b:96:19:f7:de:71:5c:8d:0c:56:
06:2d:52:36:df:31:da:c3:f7:d8:98:9b:4c:2b:af:16:24:06:
0b:9e:bc:be:37:7d:cb:fa:55:36:ba:6a:9e:63:d6:db:a6:79:
12:b8:f8:ff:1c:6b:a6:18:f4:e1:65:36:f7:c0:76:23:3e:81:
b1:0d:86:37:1a:0a:a2:90:c8:fa:63:62:2c:f3:9f:10:63:34:
65:b8:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:10 2025 by rpki-client