Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: Kh3Bh2GnquBYaHbHP35gBSifMhYx4YRit7SR3ncjAts=
Subject key identifier: CE:E4:DC:20:6C:ED:E4:9C:94:AE:3B:05:89:02:30:9F:2C:B4:A3:91
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 0198895780B197C07EF01B4B79E5A4150145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 11:01:09 +0000
Manifest this update: Fri 08 Aug 2025 11:01:09 +0000
Manifest next update: Sat 09 Aug 2025 11:01:09 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: Lo0QMLNSl50umhoU6Uxbd900960fFAawkBytndcW8kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:80:b1:97:c0:7e:f0:1b:4b:79:e5:a4:15:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Aug 8 11:01:09 2025 GMT
Not After : Aug 9 11:01:09 2025 GMT
Subject: CN=cee4dc206cede49c94ae3b058902309f2cb4a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:82:96:42:7d:71:b2:16:88:10:8a:12:b7:
d8:bf:06:cd:2b:f0:ff:4b:11:23:fb:5c:53:c3:8f:
be:a5:06:18:de:e7:d1:ac:18:e7:55:23:9c:a5:b9:
0c:d1:c6:e8:37:ee:87:7c:fd:9f:ee:58:f6:32:02:
05:cf:16:88:3a:58:f5:cd:d9:04:60:37:11:c0:82:
45:50:f0:b0:26:ff:07:35:5a:81:fc:31:33:fb:07:
c7:d5:17:05:48:fd:ff:82:db:c7:e1:87:a9:51:1a:
13:5e:3b:0a:03:5e:34:b8:d0:1c:e2:45:a5:6d:bc:
61:51:3a:4f:7b:1e:06:ae:4e:df:c7:25:11:a9:e9:
e9:c9:01:73:ca:fa:21:a4:af:ad:75:32:c1:63:49:
29:63:ed:7a:2a:7a:51:93:37:bf:4c:bf:2b:fa:fd:
1f:11:ce:6e:17:95:48:56:62:6c:1e:75:26:f6:d2:
86:f9:04:b4:48:a4:8f:d0:e1:b5:8d:82:94:34:9b:
b2:0d:fa:46:df:0d:34:26:f2:45:3f:82:ea:5c:81:
11:13:35:7c:02:35:1f:cf:40:1d:f5:3e:31:10:85:
46:fa:bd:94:17:79:04:bd:71:18:72:d6:7e:64:41:
60:1c:6a:0d:de:c9:67:65:86:c9:4a:d9:d5:15:8a:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:DC:20:6C:ED:E4:9C:94:AE:3B:05:89:02:30:9F:2C:B4:A3:91
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:0f:74:64:52:7f:59:c5:00:05:37:81:32:c0:df:1c:ce:
91:88:f3:cf:e9:01:9c:de:1e:6f:ff:aa:39:c9:ba:f8:f1:99:
fa:c6:94:75:51:c2:61:ef:a6:32:e1:7c:49:8e:70:22:e4:71:
65:38:79:52:dc:b0:c8:35:fd:41:37:19:c4:64:74:95:7b:0b:
3a:4a:cd:b3:41:13:84:6e:9b:ea:55:3d:77:fe:b8:8c:c1:16:
4c:9a:a7:cb:ac:fc:cc:12:9c:dc:0c:b4:48:6d:45:35:f2:6e:
1c:88:11:d9:86:ce:b9:39:3c:56:29:e1:f5:ed:31:72:ea:6b:
6d:d8:48:c8:0a:5f:9e:b6:dc:07:b4:17:2c:3d:d5:b7:b2:54:
f3:6d:54:9e:f4:dd:e0:8b:0b:90:65:5c:25:ba:1f:c2:0f:92:
82:d0:1c:97:f0:c1:5c:f7:54:04:af:99:69:98:ef:c7:f2:ff:
ab:fb:25:6a:3f:b6:bf:a1:fb:96:df:1d:1a:cf:b5:96:96:65:
09:08:93:a4:63:66:4b:f6:8a:19:96:8b:cd:33:a2:10:8e:f6:
21:b9:ff:b9:95:2c:4d:e5:2a:dc:26:1f:d4:31:d3:29:db:bb:
77:99:36:10:ee:2a:f9:3d:ef:8b:77:00:21:33:53:41:7e:1d:
c9:dc:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:58 2025 by rpki-client