Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: Nnug08nq5ZW72IPkq++YRNDfesl6HBmg9qagzHq9VvA=
Subject key identifier: FA:67:29:9C:E0:4E:09:E3:CF:0A:6D:63:C0:B9:23:CE:F1:56:28:D3
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 0198D5F14E87C03D2858B8A6CA6C404B8FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0A49
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: EIxZfZZVFXCW8gCeHHMPd15EG56tTYGi94IUPcv0xwY=)
2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4e:87:c0:3d:28:58:b8:a6:ca:6c:40:4b:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=fa67299ce04e09e3cf0a6d63c0b923cef15628d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:66:3d:ae:47:b6:84:52:21:34:fa:7e:d5:
5a:41:82:17:1a:57:7f:e7:3f:6c:c7:01:63:c4:6e:
d3:7d:ea:c7:be:96:bb:47:7b:f0:8a:74:3d:2e:97:
b9:eb:19:b9:ba:45:cb:a9:de:96:68:aa:57:c4:75:
2f:72:ed:bb:a1:2c:7c:d2:f8:97:7b:43:dc:67:34:
e1:53:41:ea:70:e8:5e:0d:0d:53:74:f2:7c:01:51:
da:f6:36:72:4b:d3:b7:27:f3:8c:03:af:32:dd:f0:
d7:f8:90:0f:36:9a:05:b7:d2:0a:f8:ef:23:65:47:
52:25:01:d7:d1:e0:45:0e:47:2b:16:b0:4f:d8:3f:
43:41:c1:04:6d:b4:24:f5:c1:18:d6:27:a1:cc:5b:
56:0e:bb:b9:c4:9d:84:b1:8d:26:65:1e:4f:5c:fc:
33:1a:61:a2:38:c9:7e:be:55:02:2c:7d:f8:96:c2:
e2:53:75:1e:b1:6a:91:69:c3:51:bb:2f:1b:4b:0f:
99:c3:42:86:1a:7c:31:5b:92:23:02:39:fb:a8:54:
49:06:e5:f9:2b:aa:17:74:8a:a4:fd:3e:4a:a5:e2:
d5:8d:7d:bd:3c:36:c8:57:66:0a:66:b9:ee:dd:29:
e7:2f:2f:01:1f:9f:05:68:95:e0:81:82:cd:8e:42:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:29:9C:E0:4E:09:E3:CF:0A:6D:63:C0:B9:23:CE:F1:56:28:D3
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:91:4d:56:f2:ac:dc:a1:4c:df:9f:22:f3:a1:d6:c6:9c:f2:
a1:b6:d9:8c:28:b1:2c:0c:48:e9:60:0d:fd:52:6d:6a:a3:7d:
e8:50:5f:bd:9a:e0:89:3e:ee:da:e6:34:ae:f0:bf:3a:33:1c:
33:4e:66:79:eb:cb:c2:13:ba:73:38:81:70:07:f5:d5:e1:8e:
b9:a0:aa:79:fc:35:19:15:17:7e:e0:3c:fc:07:9b:9e:15:5e:
e4:e8:9b:3f:1c:b4:51:02:3c:f0:45:6e:9e:20:60:fe:37:b9:
93:25:a5:9b:5c:ad:b7:4b:d8:d6:69:cb:b9:a4:b2:d6:69:0f:
a7:5f:3f:5f:e8:28:b0:60:2b:af:d1:27:e6:e2:4c:d7:11:bd:
23:12:1d:9e:65:10:a3:c1:e5:84:65:24:81:b6:b3:57:45:fd:
06:d0:52:d8:ab:fb:a2:66:b0:4b:d0:71:92:8e:fe:89:22:de:
9c:54:f5:4b:e9:5c:81:3a:5b:8d:fc:c1:17:46:6f:f6:3e:38:
3f:89:bc:3c:72:11:72:52:77:bb:b5:7e:d9:6a:95:9c:12:c4:
b7:9b:2b:63:fe:f7:12:19:f0:d3:a0:f1:b8:e8:02:9f:80:5b:
23:e5:fc:28:ce:e8:0d:10:f0:d3:3c:66:4e:4c:c5:44:18:eb:
17:4c:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:23 2025 by rpki-client