Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier: igzuzNokj0XRpPWQTYfCxT183VuOeLH9VwDhew2rFzA=
Subject key identifier: 17:A5:A1:0F:8F:67:01:6F:ED:1F:D2:8B:53:69:D2:87:85:D1:36:5A
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 0198820C3DDFAEAABF3994FEEED64CC2FB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number: 09CB
Signing time: Thu 07 Aug 2025 01:01:37 +0000
Manifest this update: Thu 07 Aug 2025 01:01:37 +0000
Manifest next update: Fri 08 Aug 2025 01:01:37 +0000
Files and hashes: 1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: WSNDcVzGHr7lZZeq3OGF2x5YmqBJDqviDNZxbtUZbts=)
2: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (hash: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:3d:df:ae:aa:bf:39:94:fe:ee:d6:4c:c2:fb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Aug 7 01:01:37 2025 GMT
Not After : Aug 8 01:01:37 2025 GMT
Subject: CN=17a5a10f8f67016fed1fd28b5369d28785d1365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:42:a1:38:c5:7b:f9:03:1a:30:99:0f:7b:
cb:75:66:7f:66:f3:52:17:55:0b:17:81:1c:a5:ab:
87:10:f7:90:7c:15:6e:04:6a:87:cd:47:09:2b:30:
e0:02:36:f9:e8:29:30:a2:c3:5c:07:99:13:46:fe:
05:be:be:88:4e:f4:4b:24:a5:98:11:e8:6a:04:c3:
24:5a:59:a2:3e:b7:dc:82:cb:70:f8:08:a5:32:c1:
aa:a4:cd:ff:76:55:e7:76:dd:02:02:72:ff:4e:b4:
30:f4:45:cf:35:f4:ba:34:43:21:86:9b:86:a7:1c:
75:94:f9:62:32:b3:de:dd:a2:b6:ba:e7:09:82:14:
58:65:5f:02:68:f3:03:4f:9f:1d:75:9e:7c:16:7a:
1a:b7:89:54:42:fa:3d:25:d8:9e:b2:c0:6c:6d:3e:
e1:76:93:c2:ea:94:af:3c:e1:fd:e8:36:f6:ab:58:
3a:b9:81:3c:98:57:5d:03:12:fb:73:3f:b5:df:3f:
70:94:a0:d6:80:ce:a3:2f:e3:51:0e:de:ad:2a:30:
32:e1:a4:4c:61:b0:6d:87:06:a7:ae:a8:f4:42:08:
70:0d:3c:44:06:24:a0:9a:3b:30:72:1a:6d:ae:72:
98:c7:93:68:14:90:0e:c1:45:55:f7:48:b7:50:43:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:A1:0F:8F:67:01:6F:ED:1F:D2:8B:53:69:D2:87:85:D1:36:5A
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:74:e7:dd:6a:18:88:4a:65:55:ba:ab:c4:6d:7c:89:63:
3a:27:ef:50:59:a1:9d:24:fb:bc:c1:fd:43:ef:06:db:58:e9:
30:e1:00:0d:81:ac:14:dd:d5:31:7c:6a:2b:e0:08:a9:05:34:
2a:ab:c8:6c:fd:d4:3b:f5:0c:0c:43:b5:53:d8:89:50:ce:29:
0b:1c:1d:49:21:ae:d9:9a:6c:8c:d6:34:54:fd:0b:60:96:60:
9d:b7:f8:4c:cf:de:5b:90:f0:cf:64:5f:68:a5:cd:2b:6a:e6:
f4:51:33:9e:b8:a6:c9:09:08:d9:70:a2:5b:62:ec:26:a7:71:
a1:84:b9:ef:a8:a5:a0:fa:26:5a:93:7f:cb:9a:56:3f:8f:a3:
0b:f7:33:d6:1b:1a:a0:c1:de:a5:c4:a1:8a:bd:a9:b3:d8:b8:
39:87:0a:55:c0:20:74:12:50:15:a6:06:f6:ce:94:77:63:6a:
cc:e3:91:64:b9:30:f6:89:dd:a2:05:66:0a:e2:aa:f7:2a:75:
51:ba:0c:9e:cd:37:6a:dc:33:26:08:61:b7:83:06:8d:29:3a:
c1:8d:ea:7a:a7:e0:a5:25:a9:e6:9d:06:a1:12:1d:13:fc:26:
6f:01:6b:4e:69:59:5d:3b:7c:10:8c:73:5a:77:a4:37:0c:bd:
0b:28:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:49 2025 by rpki-client