Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: sIZ8YsC/+PLdYyRFVhc0D96CGTiIQrRYFM3mnzzB4zw=
Subject key identifier: A8:79:2C:F0:D0:07:25:B9:78:58:99:42:8B:7E:F9:33:FB:7C:DE:1E
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01985FB6B09A69FC5332C5F5CD0B2CDE1705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 160B
Signing time: Thu 31 Jul 2025 09:01:04 +0000
Manifest this update: Thu 31 Jul 2025 09:01:04 +0000
Manifest next update: Fri 01 Aug 2025 09:01:04 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: spKlbi+cGD/DIu2khDbGv/wth2zYzTVZrfw1MjO0Dww=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:b6:b0:9a:69:fc:53:32:c5:f5:cd:0b:2c:de:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jul 31 09:01:04 2025 GMT
Not After : Aug 1 09:01:04 2025 GMT
Subject: CN=a8792cf0d00725b9785899428b7ef933fb7cde1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:36:01:dc:6e:ac:96:74:e5:fb:f5:2d:1f:
45:b9:b0:9b:dd:04:2c:b1:39:7c:40:52:eb:4d:da:
db:a8:a8:67:6a:45:c2:eb:1c:b6:a0:ca:8f:b4:d4:
72:6b:6e:bf:0d:4c:1a:ad:fe:28:06:0f:e5:e4:d4:
2a:bb:79:24:dd:ab:c8:5d:6f:8c:63:db:07:1d:85:
c4:28:44:7f:90:88:2e:94:f4:10:41:09:5a:32:3b:
33:7c:6b:f0:4a:ea:db:9e:59:61:ff:1c:00:3f:e3:
85:5e:8e:2a:f8:cf:30:45:9e:05:3c:34:98:32:5d:
58:f6:70:91:ec:d7:13:da:94:42:c5:db:e2:f5:a0:
b4:6c:2c:5d:70:2c:05:67:64:23:6b:da:d5:6d:b9:
19:6d:b5:a8:b9:29:d6:76:95:3a:d5:1d:03:58:99:
c3:44:ca:36:a4:02:e9:65:fc:e7:db:4d:2c:32:8f:
5f:39:c7:19:8b:2a:55:43:e8:e5:b5:3d:77:d8:b5:
9a:17:61:53:fa:ee:2b:80:a1:3b:b2:c1:7f:8c:e6:
31:4e:9d:24:a7:22:54:31:c4:17:68:67:0d:79:63:
c2:33:d4:e8:50:54:10:54:17:c1:09:82:7a:6f:f0:
6a:ec:ea:51:97:f6:fd:22:21:a9:5a:3f:6f:dc:43:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:2C:F0:D0:07:25:B9:78:58:99:42:8B:7E:F9:33:FB:7C:DE:1E
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:29:5d:da:ee:e9:7b:cd:60:04:a4:f9:70:29:51:61:dd:79:
c5:3e:b5:4b:01:e1:a5:bf:e3:56:63:87:22:68:c7:99:8c:05:
d3:70:7c:87:d5:8a:59:ce:da:2a:b2:1a:03:51:3a:58:0e:e2:
57:41:53:3f:7e:f9:3d:fb:d9:0c:91:ee:bd:d1:7f:0e:19:e5:
bf:a9:8e:cd:1a:f2:2c:c4:26:24:c5:fa:d4:f7:7d:76:7f:55:
2d:95:76:b2:68:12:66:75:a8:77:b0:44:08:70:dd:72:75:63:
12:ab:ab:9b:97:79:ee:07:91:20:aa:5e:76:23:11:38:d5:24:
51:ec:a2:89:d4:69:a1:56:3b:11:06:62:16:08:7f:b5:c7:11:
34:e1:71:5b:9b:be:67:a7:e4:33:6f:00:2c:69:30:e1:1e:43:
77:2f:6b:f4:d1:25:58:5d:76:5f:7b:19:82:ec:ee:a9:fd:80:
85:76:1b:da:58:23:36:be:97:df:1b:59:89:b6:ef:2a:cd:91:
27:93:e9:09:ad:ac:8e:c4:49:c9:74:0f:5c:be:14:7a:1e:15:
b2:77:e8:57:cd:f0:3c:c2:2a:97:44:6f:30:2a:d1:41:f9:1e:
79:1d:dd:13:86:3a:4a:be:73:19:23:d2:b1:63:89:79:3a:0e:
52:56:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:15:31 2025 by rpki-client