Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
File: O2MTmh9PiMMM7iIckUajbbVU_3A.mft (raw, json)
Hash identifier: uFxHkcSYvgwpMo2Uzrqho5br1fVsh6m4SL+1elph/bs=
Subject key identifier: 7A:8C:E9:4D:E0:91:AD:BD:31:1A:E7:A5:CA:5B:C1:BA:84:72:40:45
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 019873E302FEEB02597C8D346ECF1BC17F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
Manifest number: 08B1
Signing time: Mon 04 Aug 2025 07:01:53 +0000
Manifest this update: Mon 04 Aug 2025 07:01:53 +0000
Manifest next update: Tue 05 Aug 2025 07:01:53 +0000
Files and hashes: 1: JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa (hash: ErYlkkNh49mz7B2O46c+uSN3yYpaocdKkRzHsCd2I3A=)
2: O2MTmh9PiMMM7iIckUajbbVU_3A.crl (hash: BtJ+XwJJcBdE217L88j0EkLF6vUxk8t45Z35rueYoX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:02:fe:eb:02:59:7c:8d:34:6e:cf:1b:c1:7f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Aug 4 07:01:53 2025 GMT
Not After : Aug 5 07:01:53 2025 GMT
Subject: CN=7a8ce94de091adbd311ae7a5ca5bc1ba84724045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:6e:f7:b0:fa:6b:5e:74:ce:95:5c:18:59:
e6:3e:84:fc:8e:ef:49:1d:60:40:2e:e6:6b:3b:f5:
83:88:b0:ab:d4:b1:c1:1a:e5:14:f8:66:df:57:f2:
8c:25:54:1e:10:00:f2:f2:c9:19:11:71:6b:13:bf:
3c:09:35:52:f2:5d:78:a5:f8:31:69:6b:c0:b2:7c:
7d:29:bb:97:eb:46:f5:c0:e4:a3:95:2c:d7:e1:60:
3a:fa:c5:ef:74:6e:a2:dc:64:2d:8a:54:8f:05:96:
84:3a:0b:51:85:de:d2:a4:37:ea:d1:4c:23:e9:86:
ec:01:63:b8:5b:a7:27:e7:bc:b0:5a:1d:76:6e:2d:
96:6f:9f:8b:51:21:dd:32:48:de:4c:62:82:19:62:
aa:89:8d:62:8d:ef:10:f7:73:30:38:43:ac:17:04:
72:e3:da:cc:6a:bc:10:56:ab:c2:c6:82:f6:76:33:
e2:71:7b:aa:a6:f2:67:2d:24:8f:d1:8a:65:e3:41:
5c:e9:b2:ae:38:84:b6:18:b0:34:2d:97:ca:36:2b:
77:4b:b7:e9:71:58:61:a0:d8:6d:22:54:b8:bf:e4:
52:a5:76:23:81:2e:33:cb:cc:d2:4f:35:4f:d5:99:
02:b0:54:4c:48:52:cf:3d:a9:5d:2b:41:5a:c2:f5:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8C:E9:4D:E0:91:AD:BD:31:1A:E7:A5:CA:5B:C1:BA:84:72:40:45
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7b:1c:8b:9a:03:6f:6d:4f:9f:fc:ed:e5:20:50:15:fc:d2:
6a:ee:eb:f8:f1:52:e3:57:b5:40:d3:4a:a1:1d:37:fe:e2:f4:
ec:2a:91:46:9b:f2:c9:13:ba:0e:76:28:ac:c4:2c:b4:37:20:
ba:28:55:7b:f1:50:5f:ce:5a:47:f9:ce:03:8b:d9:fc:74:f9:
24:a3:8f:78:a7:5e:b8:14:32:5a:34:30:fe:00:82:2d:c9:32:
b5:67:89:7f:29:30:2a:0b:27:16:82:52:3e:27:40:14:da:aa:
5b:2a:86:3a:99:b4:3e:60:a5:71:be:86:67:31:7c:3f:ae:4f:
b8:0d:ab:ca:cd:01:73:4b:92:14:7c:d8:ab:e1:47:bb:17:c0:
21:a0:82:de:f0:9c:ed:f9:17:3a:bd:de:40:d1:4a:5e:d7:d4:
7c:44:5d:4e:bf:5b:62:7d:0c:20:f2:5d:33:36:d4:5e:5d:10:
fc:20:e4:7a:af:a3:72:49:da:7f:ea:9c:53:51:ae:cb:5f:de:
b0:80:8f:e3:9e:a4:d4:5e:71:f8:bb:e2:b5:08:9e:b4:10:b7:
ba:8a:d9:ec:5d:81:a7:3c:91:37:fb:dd:3a:36:b5:0b:9e:d0:
d0:10:7c:c2:13:db:5f:d2:cb:1b:e0:d1:1e:be:94:66:41:e1:
38:27:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:55 2025 by rpki-client