Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: q8rZIFvVCQdcYSU3eUEZKKz39e0VVSikG+Q4oJ7husk=
Subject key identifier: 94:75:23:B0:37:82:E5:24:30:05:17:F3:19:5C:28:58:DB:1B:D0:64
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 01984DE7015D09545C9B86C34F78328FB71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 062C
Signing time: Sun 27 Jul 2025 22:00:41 +0000
Manifest this update: Sun 27 Jul 2025 22:00:41 +0000
Manifest next update: Mon 28 Jul 2025 22:00:41 +0000
Files and hashes: 1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: ETaIXZKqJb/hjjJnjCiSYwIY1JKqiUK3MeVWsHUPcFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e7:01:5d:09:54:5c:9b:86:c3:4f:78:32:8f:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Jul 27 22:00:41 2025 GMT
Not After : Jul 28 22:00:41 2025 GMT
Subject: CN=947523b03782e524300517f3195c2858db1bd064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:c4:21:1c:2c:df:70:64:99:9d:c1:83:b6:
c3:27:eb:ab:55:d1:b1:46:55:bd:29:a1:9e:00:ea:
74:09:b5:48:73:b7:e7:9b:ff:b2:1b:1c:74:e4:b4:
14:7d:4a:2f:31:91:f3:d7:dc:75:9d:16:93:33:dd:
e4:f0:2f:5b:14:2c:1a:da:c5:fc:d7:db:94:0e:3a:
af:c4:1c:48:c6:39:01:94:7d:1f:fc:18:76:26:59:
4a:a8:8d:fb:43:bd:b0:98:db:6a:61:bc:cd:16:bd:
c2:25:b6:cb:c1:d9:17:3d:9a:1e:a8:59:63:0c:58:
27:16:c3:c9:a0:03:70:21:51:c1:ca:0b:7b:0e:83:
ef:4f:6b:5e:08:c6:4f:c2:26:fc:8e:72:67:18:39:
f8:13:df:a2:84:d4:ff:13:52:f4:44:c1:5e:5e:05:
14:a0:a7:06:3d:4b:88:31:c5:c0:88:08:34:f2:fd:
97:0a:97:bf:a2:e6:59:2f:31:d5:d5:46:b7:40:11:
5b:35:21:63:c7:cd:91:f1:c0:55:fb:05:9d:09:8c:
d0:84:5f:00:69:4a:2b:ba:49:03:c2:37:75:9e:c5:
b8:c5:6c:bb:0e:9c:82:d6:3e:73:0c:98:f2:85:76:
cb:fd:33:ff:83:a4:7c:01:d7:5c:52:f5:ee:da:9b:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:23:B0:37:82:E5:24:30:05:17:F3:19:5C:28:58:DB:1B:D0:64
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c3:13:d6:88:bb:dd:a3:7f:0a:b8:4c:4f:62:dd:54:9d:66:
5f:ba:09:42:92:32:82:c4:74:f6:9b:46:66:d3:63:d0:56:94:
49:a1:f0:08:6e:ac:d3:83:8a:10:17:33:84:7b:f9:90:dd:f8:
59:e8:1f:fe:9c:41:c7:36:44:f3:76:c5:76:e9:ee:59:b4:9c:
da:19:91:87:58:e2:a3:b6:ba:4d:78:94:1b:23:97:af:d1:e7:
b9:e8:fe:b4:82:98:84:ae:00:62:f1:ca:a1:aa:4c:bb:e5:5e:
dc:f9:a1:06:f8:be:d3:9c:bc:58:9d:28:ab:ae:82:d4:ca:02:
94:2d:c2:c9:47:20:8c:4a:e5:bf:1d:46:3f:34:d3:0b:53:3b:
84:e3:27:8a:45:5e:76:f0:8a:2a:6d:59:b8:04:3a:0c:18:70:
d0:ae:e9:48:50:6e:af:6a:97:02:c5:e0:24:1d:7d:4c:51:0d:
b1:2e:b1:fd:e0:ba:a8:11:60:d6:22:aa:fa:75:55:82:31:c6:
fe:f8:a9:09:04:a5:15:6b:3e:a1:d1:f6:a8:0d:67:26:d7:37:
3d:c8:9e:47:7f:87:2c:81:88:9b:3c:a4:46:24:31:26:57:b9:
a5:42:04:8b:c2:35:2c:a8:9d:46:3a:30:a2:6b:79:96:d2:65:
7e:5a:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:21:36 2025 by rpki-client