Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: U1f0oMBZyo/K6PAd1dUsaQkpPVT0xsj0G1YRi4J7d44=
Subject key identifier: 00:C2:0D:59:22:6C:38:AA:A4:FE:DD:E6:94:E5:4E:28:BD:FE:F7:EB
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 0198D6CD116907163EBE8653AFE081E9B438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0ACB
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: ykvqQymTBZQ3FrGLm4f5hB7G5F/neA1hOlofynKH/0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:11:69:07:16:3e:be:86:53:af:e0:81:e9:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=00c20d59226c38aaa4fedde694e54e28bdfef7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:07:d6:39:fa:50:98:ca:a1:1e:c0:be:53:
7d:1c:52:2c:01:3e:b5:1c:14:0a:e2:aa:a8:d2:67:
48:5d:b5:4e:0e:7b:58:f6:a2:31:84:5c:71:d6:81:
04:3b:5c:e3:24:5e:16:31:d5:e6:3a:29:67:e8:fe:
14:19:fc:e5:7f:65:c9:6c:ba:68:e1:8a:d6:e1:d0:
f2:81:18:e2:72:4f:04:ed:42:a5:e0:ba:47:5d:07:
ad:43:5a:27:fc:4c:01:75:60:02:5d:69:bd:c4:40:
ee:34:6c:77:3c:82:f6:a2:ee:eb:7a:d6:9f:1e:15:
d0:f0:09:7d:63:c7:85:56:50:9f:de:62:2d:35:f4:
b3:41:2d:d6:6c:73:2f:f2:74:9f:f2:b5:c8:a3:f9:
80:10:4e:b7:85:42:67:e4:59:eb:bd:5e:7c:62:0f:
49:c5:36:c9:a3:e1:94:75:17:ca:af:8c:78:21:02:
47:f4:5a:6e:68:2a:6a:95:d5:18:3f:6c:a3:02:af:
d9:ba:6d:a6:f2:57:ad:1f:47:5f:35:03:3b:2b:f2:
c7:22:97:f5:4e:ec:b4:55:69:d2:11:29:5c:6a:aa:
3d:e6:f2:2f:02:cf:7d:64:ef:5f:e9:37:a7:5d:c7:
0e:68:ae:47:74:f2:90:ed:9e:02:5e:21:6c:4e:28:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:0D:59:22:6C:38:AA:A4:FE:DD:E6:94:E5:4E:28:BD:FE:F7:EB
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:f9:0d:8b:dc:13:88:8e:0b:c3:5d:90:b4:50:04:99:ae:
d5:31:7c:e4:e7:7f:0a:4f:1f:7a:0a:03:84:92:94:e3:e1:b6:
ab:6f:32:7c:ef:e3:e1:82:1d:05:ad:26:f3:d7:40:e7:df:c4:
a7:01:7a:eb:38:50:99:4a:4b:d2:ea:70:90:f2:e6:42:22:b3:
b1:70:29:b1:d5:04:98:0c:3d:29:30:6b:81:bd:08:7c:84:e7:
7c:64:a3:e9:08:78:a3:b4:77:c2:70:a5:02:c3:d6:f1:38:09:
37:b2:82:48:f4:f1:e4:c4:45:91:c6:07:9c:40:23:58:92:cb:
7e:01:80:cd:de:6e:76:cc:00:76:5d:05:09:c9:4b:34:86:c5:
67:40:06:5b:1c:9a:12:9b:ed:31:be:fd:bd:0e:ef:50:95:36:
92:d3:c1:d9:c6:6d:8d:c4:c4:d0:47:21:76:a4:54:39:8b:63:
08:80:d6:8d:fd:3d:f5:7d:5d:d1:29:ec:31:e9:56:c8:7c:c8:
cd:0d:94:98:7f:8b:05:7a:2a:42:fc:36:f8:27:e7:a0:6f:0a:
09:e1:79:24:6b:3c:9e:8b:df:c0:8e:d3:bb:b6:cd:da:ab:4f:
79:ff:6e:c3:52:4b:85:ef:84:10:08:de:55:9f:39:b9:12:39:
0e:83:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:03 2025 by rpki-client