Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: 7bLFXGMi3p8k8eECV8OmzWZnS1W5UYzV76qf+ZrsMvI=
Subject key identifier: 20:2F:47:12:EA:B6:38:62:D4:B0:CD:EC:C0:3B:34:C1:7F:E0:CE:9B
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 01987F0ACCCC5E934AFE98836B802A9C34B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0A1C
Signing time: Wed 06 Aug 2025 11:01:10 +0000
Manifest this update: Wed 06 Aug 2025 11:01:10 +0000
Manifest next update: Thu 07 Aug 2025 11:01:10 +0000
Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: 0rCr5W9ZcvfemKesnBV/ePm0e4GsSvIFCgpRpEGzYJ0=)
2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:cc:cc:5e:93:4a:fe:98:83:6b:80:2a:9c:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Aug 6 11:01:10 2025 GMT
Not After : Aug 7 11:01:10 2025 GMT
Subject: CN=202f4712eab63862d4b0cdecc03b34c17fe0ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:3b:5a:c9:c9:d7:dc:c6:e7:df:03:dd:20:
4c:47:85:27:ed:e6:da:92:3f:bf:3f:b4:9f:24:a9:
ee:37:92:1f:8e:9a:7a:fa:04:27:79:88:c9:96:54:
3b:df:22:71:7b:12:ba:6d:6c:1a:e6:28:cd:75:3f:
74:9d:77:52:21:94:1e:b5:b3:2e:04:a3:00:ae:ec:
14:7f:07:66:f4:91:d8:0f:e8:32:5c:79:32:70:07:
26:14:c2:d9:9c:16:eb:ae:71:11:2a:39:6a:6d:53:
28:ae:f5:9d:75:fe:f2:03:68:c7:3d:f8:41:e5:a5:
04:1e:04:2d:be:83:7d:04:a6:de:a0:12:be:57:1b:
6e:3c:fc:57:83:c0:94:51:1b:fa:8b:ac:f8:a0:c9:
c7:14:f0:ec:01:e4:21:01:62:9d:11:19:95:1e:2a:
c7:e5:fc:f8:5e:ed:4a:0d:3b:1f:19:cc:23:60:c5:
68:e4:e6:85:0a:26:1d:13:9a:1b:ad:e3:7f:28:ba:
fd:67:17:cd:be:07:9f:fc:3e:3a:d1:b9:21:25:a9:
86:9e:20:08:13:c0:7a:03:76:a8:9f:02:19:71:7f:
33:0f:fa:0e:0f:5d:ed:63:48:09:fa:f4:52:58:72:
0f:f4:ea:d1:3d:8a:c5:12:c9:a8:70:b6:84:78:1f:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:47:12:EA:B6:38:62:D4:B0:CD:EC:C0:3B:34:C1:7F:E0:CE:9B
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:25:17:90:14:c9:a4:38:8c:a7:f0:38:61:93:8e:3a:27:9e:
45:90:aa:8c:bf:2a:9d:93:77:e3:66:a7:90:c7:8d:28:29:da:
e2:8a:e1:23:12:3a:4d:f1:02:93:6a:2e:2f:8b:eb:d8:9f:63:
dc:66:72:17:b3:ea:c6:48:98:52:99:de:1f:20:9c:53:86:6d:
19:6a:bc:a8:76:7a:ec:a3:bd:82:cc:b3:df:dc:bf:b1:bd:90:
f2:2b:80:ed:22:7e:bc:25:a9:9f:55:6a:e0:55:19:ac:68:06:
ed:21:c5:71:71:32:96:38:0a:33:6f:51:1e:cb:b1:00:73:4e:
89:72:36:5e:e4:34:2b:18:5c:f6:9f:47:d6:3a:aa:df:21:b5:
03:85:f7:2d:ab:b8:fa:2a:fa:d5:4c:42:cb:2d:96:9d:37:79:
55:b0:b2:cc:e8:7e:6d:aa:c7:2c:ab:d0:dd:5d:a0:7c:ad:25:
d6:90:5c:8e:b4:cc:28:0f:35:96:e0:e1:c5:27:e9:7f:7e:49:
49:a7:86:db:83:ee:0a:9d:10:4e:28:c6:bd:24:8c:d8:a2:15:
4b:68:4a:89:3f:75:61:58:20:73:e9:21:d7:6b:ea:e8:9d:63:
83:f4:0d:8a:19:47:73:6b:d8:15:f7:e0:31:65:f6:75:91:30:
38:de:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:41:35 2025 by rpki-client