Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: gHM44I0y98teglbtF7RKcUxm+t2pfOQZi4maGKErapM=
Subject key identifier: 0A:15:73:EE:6B:45:33:DE:3D:8C:41:3F:F2:60:7F:DA:43:92:13:E8
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019922C369FA0FA53BF733A675F8A8AFB08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0986
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: 8HVqpn5m0EFw1g8/BOMOD8B9ro/3jvHDbmaw6ebqpsU=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:69:fa:0f:a5:3b:f7:33:a6:75:f8:a8:af:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=0a1573ee6b4533de3d8c413ff2607fda439213e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:86:29:03:1e:e8:a0:2d:f0:c4:d4:96:2c:
b8:1b:10:fc:73:86:58:05:18:12:f5:85:ef:7b:74:
c7:16:98:e0:e5:e7:ae:de:39:7b:ec:4a:ad:f2:fb:
84:77:ba:73:8a:5e:77:25:95:de:af:5b:0b:d6:d3:
d1:68:69:db:42:f6:38:f4:4c:bf:5f:37:99:7b:55:
20:22:a5:e7:63:d6:2f:11:06:8d:41:2f:ee:80:e8:
7e:68:50:8c:86:79:cb:92:c0:1a:91:d9:d8:fa:0c:
d8:f0:f0:aa:9f:71:c1:d8:54:62:e3:05:86:31:e7:
64:0a:1f:cc:ac:b8:bf:9a:8e:ec:09:33:fe:4c:51:
fb:b8:a9:31:12:c3:5a:2d:03:cb:a8:79:f5:5f:23:
10:bd:ba:08:68:e2:8b:7c:82:25:a5:8c:61:da:8c:
60:e9:45:1e:49:b0:dc:bf:93:90:a2:b6:50:90:7f:
d5:5f:af:99:6a:cc:91:70:af:dc:42:a6:53:69:88:
88:92:4d:97:f7:dd:a3:de:74:d3:5a:db:b3:f2:db:
fd:ea:2c:02:9b:b6:13:a0:a1:37:4e:8c:ef:6c:e2:
31:4b:74:9d:2b:9c:66:a5:5c:80:c1:16:f5:b5:72:
e1:e7:ce:02:69:54:b7:81:3e:eb:77:08:3d:07:e9:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:73:EE:6B:45:33:DE:3D:8C:41:3F:F2:60:7F:DA:43:92:13:E8
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:33:1b:6f:b8:18:92:19:c4:3f:e8:d2:6b:ba:ed:5d:94:
b3:64:0f:8d:8c:3a:86:e0:1a:40:31:50:a6:26:4b:94:16:3d:
da:5a:0a:44:bb:6e:53:83:e9:e8:bf:36:0e:e7:97:b8:38:32:
88:74:88:3f:c8:69:2f:44:f2:29:6a:45:30:0b:be:f7:06:c1:
cc:5a:39:c0:9b:8f:96:35:1a:17:a7:3c:93:40:ff:72:7c:42:
0b:35:11:af:ce:11:62:56:ab:0d:f3:d8:ad:62:98:97:15:63:
fc:ab:15:1c:fd:47:33:6d:8a:a5:5e:72:45:fb:f9:fa:df:ab:
6e:b3:47:e2:2d:d6:ab:09:46:74:f7:12:cf:59:85:e4:40:e2:
23:23:db:4d:bd:a6:5a:42:5a:ae:d3:cd:82:47:d5:4f:db:d6:
21:a4:1c:9b:81:18:e0:1d:5f:8d:9c:0c:ad:61:47:9c:e2:6e:
38:c2:5b:33:e7:f3:ce:2f:74:fa:e5:73:00:bb:de:11:d6:db:
2e:ac:3f:fc:af:ba:bb:ab:17:55:c2:26:c8:1d:5a:61:bf:cd:
d1:46:f4:55:f3:17:11:e0:a6:6d:11:6b:0f:f5:a0:e6:45:4b:
b5:4c:26:24:ae:dd:b0:0f:65:54:bf:38:f7:b6:ea:ef:53:68:
f0:27:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:32 2025 by rpki-client