Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: QlYiV/tJ6vT/xkEmbS9cSz6Fw3aUrMmm26tulyZ17rw=
Subject key identifier: 8E:36:D2:5A:BE:3A:E2:D2:6D:3F:84:6D:93:5B:3A:C9:2C:39:CD:58
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0198955BB764F88CC4E71C497370CD6AE143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 19:01:12 +0000
Manifest this update: Sun 10 Aug 2025 19:01:12 +0000
Manifest next update: Mon 11 Aug 2025 19:01:12 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: k0oNQaKDZKrfkr21uuMPC+t3EVl3jd9yMheugQonutQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:b7:64:f8:8c:c4:e7:1c:49:73:70:cd:6a:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Aug 10 19:01:12 2025 GMT
Not After : Aug 11 19:01:12 2025 GMT
Subject: CN=8e36d25abe3ae2d26d3f846d935b3ac92c39cd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:33:14:ff:c9:9d:e4:24:9c:0a:3e:c6:ba:
be:a3:4f:2a:52:3f:ff:52:ab:67:d1:53:6d:35:ee:
34:39:a1:ab:df:7f:bc:6e:c1:71:f9:e5:e5:b4:74:
c5:ec:52:ca:1e:3b:86:e7:0e:93:d5:ee:a8:d0:fa:
0d:48:bf:1f:5a:8c:c5:7f:b6:13:b4:60:02:40:32:
93:76:d6:48:71:ec:09:62:92:91:31:a8:c3:c9:94:
d0:a9:27:4e:12:d9:c9:29:06:ec:ab:0c:cc:59:0d:
9b:c6:14:ce:cb:2f:ee:a5:33:c1:cc:86:30:12:1d:
79:be:a5:2f:c3:9f:40:e9:38:a7:5e:91:3c:f8:d7:
9b:85:2d:57:62:ba:4e:a0:f5:f9:20:75:ef:6d:e4:
10:31:4d:a9:b8:34:47:41:4f:a3:3a:78:46:8f:e5:
9c:73:d3:31:8b:13:07:32:1f:ed:45:a2:a1:69:13:
e7:84:85:2d:47:d4:63:44:26:00:06:22:59:84:e9:
5c:e3:a8:da:f3:c4:fe:e1:44:eb:39:7e:a3:d1:6e:
70:ef:5d:d9:6b:a8:5d:d8:7e:ec:e5:20:eb:1a:d3:
0d:66:e0:2b:86:17:53:83:05:fd:04:cb:6f:a5:74:
7c:5f:ba:43:2e:18:ad:0b:0c:83:48:a9:c6:e3:51:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:D2:5A:BE:3A:E2:D2:6D:3F:84:6D:93:5B:3A:C9:2C:39:CD:58
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:21:b2:0e:34:8a:e5:4a:c4:bd:b5:81:f0:8d:dc:78:c7:28:
fe:b9:39:01:8a:d2:86:30:2e:d6:d1:a9:ff:71:73:a6:3c:af:
5c:c0:e0:f6:fc:4e:02:4f:cf:1d:3f:8f:2e:2c:48:21:15:50:
ef:12:d6:1f:b0:78:e1:29:3c:31:a4:08:3c:aa:b2:ff:e2:8c:
3d:eb:d5:86:13:81:cb:7e:ce:f7:98:e5:7d:f5:13:a0:69:c3:
39:f8:99:05:9b:55:7d:79:c4:b2:b0:ec:f5:62:9c:0a:f9:5a:
47:d5:7a:f4:5e:d4:6b:af:d7:49:6f:fc:58:c5:29:ca:2c:9a:
cc:1e:b0:a3:a9:3c:59:c2:17:12:20:61:c1:a6:5e:ad:a2:8a:
a9:37:d9:0a:de:df:ca:1a:77:97:f4:31:2d:45:ab:30:a1:25:
9b:e6:da:8f:d8:48:3e:f7:c7:84:72:41:83:bf:dd:e5:e3:16:
d6:bb:75:47:f1:3a:f5:a2:78:c5:e1:ad:7c:20:0f:9e:6f:ff:
9f:1e:36:93:7c:e1:7b:75:c9:8d:b4:f5:20:54:02:06:fe:b3:
64:47:02:d2:00:f1:e2:f8:66:c1:9c:3b:a7:98:cf:36:d3:cd:
5e:4a:2f:2f:f5:39:e9:02:c4:18:4a:b8:08:03:dd:ac:e1:4d:
bf:ad:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:29 2025 by rpki-client