Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: hd3dB1es5zuHlh3/CwL1KsD3Jhufztf/6J4y39PaGo8=
Subject key identifier: 55:FB:BF:8E:8E:73:24:BB:48:40:D8:E1:1F:40:0E:32:23:D7:FD:EC
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 0198D4E002999CA3048506A33501724469D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1149
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: LyCJQaY0Q6Qy0aOkGfJtrRiZSWWS6WH24VrCpT0mrnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:02:99:9c:a3:04:85:06:a3:35:01:72:44:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=55fbbf8e8e7324bb4840d8e11f400e3223d7fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:1e:6b:28:76:26:b0:31:12:3f:ab:14:a9:
35:fd:34:5f:f4:e1:cb:b1:cf:f4:95:46:d7:94:0c:
40:83:2d:b8:29:d6:89:4a:b2:61:22:d5:1b:53:5c:
10:da:39:5a:f1:3e:93:eb:56:40:e3:7d:35:ac:17:
11:f7:c1:e1:72:23:48:ca:bf:5d:a4:d3:9b:1e:58:
3a:9a:c3:05:72:d5:9e:44:cd:08:9c:c1:77:e8:3b:
99:0a:58:12:cc:59:63:25:d9:fe:5b:10:6e:8c:d5:
ec:f8:43:21:d6:ae:ae:03:2d:b9:e6:3a:e3:bb:ac:
2f:a1:3c:24:f9:f0:99:16:24:37:3e:71:b6:3c:47:
7e:46:bc:d2:0e:da:3f:10:1b:0f:47:06:a0:c3:42:
9b:d9:34:d3:0e:9d:a3:52:f0:71:d6:e1:25:3a:d8:
f8:aa:72:fd:af:57:7b:c4:0a:1d:ca:4e:6d:05:e6:
47:bc:25:fb:1b:a9:93:41:02:f1:15:38:a2:93:e0:
fe:e6:9e:ad:3a:7f:47:c8:87:5e:76:36:d4:85:81:
0d:78:d6:0a:b1:2e:8a:57:00:44:76:e1:05:46:67:
20:f1:64:ff:0b:be:d0:5a:08:b6:aa:fe:69:e0:7d:
32:47:91:6d:43:b8:b6:12:a9:38:57:1a:95:b7:04:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:BF:8E:8E:73:24:BB:48:40:D8:E1:1F:40:0E:32:23:D7:FD:EC
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b3:aa:de:65:a1:e2:c7:4e:89:92:1e:df:7f:a2:56:3c:4d:
5b:5a:56:42:eb:e5:cb:2d:cf:a1:27:38:34:52:0a:b9:e3:2d:
4a:25:bd:87:58:6c:08:21:05:bb:fd:3e:2b:27:3c:5c:4d:4b:
0b:9b:ff:78:b6:57:49:8b:ea:d0:38:47:5c:11:81:49:0d:ba:
97:d7:06:29:cf:2b:6b:da:89:65:71:a8:bd:47:c8:b1:82:37:
b4:b6:7c:10:f4:5f:23:01:c8:be:8d:79:76:1f:7a:1a:9f:84:
8e:47:c1:f0:e1:db:30:d3:d5:48:c1:41:57:47:49:0b:9c:23:
dc:8e:d4:b7:4a:03:f0:13:c1:97:9e:58:da:8d:07:79:15:ca:
76:b8:67:d1:9a:45:6d:40:15:71:eb:73:59:d2:9b:14:b4:f2:
ba:80:c6:26:cd:6a:9f:81:91:5f:8e:cd:29:c4:eb:ac:af:76:
d4:56:3c:5d:ca:b2:fe:54:e4:41:47:7c:e5:d7:31:de:9d:2a:
e9:61:16:52:2b:00:78:f1:21:90:eb:c5:93:e4:5a:ee:eb:1c:
26:37:ab:9e:6f:64:fd:ad:fd:22:00:28:d6:46:a0:4e:43:ae:
84:0d:58:5b:dd:55:b3:0f:4a:0b:57:45:5c:31:01:69:3a:27:
9c:b2:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:03 2025 by rpki-client