Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: FFK7fTvmouAll2XOQf4NtaWhKCHzEAEa68mz+/Pd95o=
Subject key identifier: FA:79:14:CD:33:F4:88:C6:49:02:13:38:46:DC:5D:81:46:B6:3F:12
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 019A725C82517F25CEF67C45989DFFDAE867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 0748
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: fOvBe0bL5jU7xebrOIKmKY0/dFhmexO7TXSn1PFMXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:82:51:7f:25:ce:f6:7c:45:98:9d:ff:da:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=fa7914cd33f488c64902133846dc5d8146b63f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:e9:65:ba:29:5e:be:3a:20:71:87:eb:f7:
fe:ed:53:52:eb:f1:5e:69:0b:16:2d:a7:c5:63:0e:
a2:2a:86:ec:a7:ae:6b:77:bf:f6:cc:37:39:f0:fb:
09:f4:7b:ff:a4:d9:47:e3:f6:5e:b1:4f:a0:78:ed:
24:88:88:12:9d:0e:d3:88:36:b9:3f:46:a5:16:e4:
bb:99:6e:bc:d4:21:dc:87:c3:49:0a:16:f6:93:00:
0f:68:d0:7d:6e:08:7a:dd:e9:65:f8:cc:64:b1:83:
6c:9a:f9:42:c9:9b:f5:13:8b:c7:67:f9:82:df:a4:
29:32:3e:1e:f3:f9:10:de:cf:e0:e3:a4:3a:a6:09:
4c:9e:35:2e:c3:68:6a:2f:5e:3b:c5:cf:33:91:76:
c0:22:b8:3e:8e:4b:3c:f1:28:ed:98:fb:6b:5c:c1:
03:f5:97:ab:26:a6:4c:ff:54:f0:94:ea:25:f7:66:
7a:03:de:26:9c:ae:0c:2a:7e:8f:8f:95:bb:bc:aa:
cf:f9:94:60:ed:a2:fd:8a:50:b0:51:c4:63:df:cb:
0f:cc:19:76:7e:cc:ba:c9:45:65:eb:9e:6d:94:b6:
4f:0b:dc:a8:59:e2:ea:51:3f:90:52:22:56:29:cb:
29:e2:ff:50:0a:2d:d8:6d:ce:78:f7:1e:ed:70:7f:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:79:14:CD:33:F4:88:C6:49:02:13:38:46:DC:5D:81:46:B6:3F:12
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:43:13:43:d2:0c:f3:48:d8:cf:ca:07:16:e9:f4:8c:96:
0d:60:27:21:dc:e5:0f:59:d3:7f:7b:b0:d5:37:7a:b4:ad:c1:
88:ce:7e:a9:d4:05:57:cd:b4:95:11:ad:3c:45:93:64:a0:a9:
4e:77:61:d0:ca:29:d6:01:5c:89:f3:1a:a8:a0:ac:b9:26:53:
b3:c5:57:9a:5d:10:52:cd:e2:bb:b5:f9:ce:3c:e9:d3:fe:05:
1f:69:12:41:8b:b7:11:24:0e:1d:f5:20:f0:35:f3:19:71:01:
b1:47:da:b7:92:fa:f3:98:d8:17:8a:c3:d7:2a:b9:be:18:0b:
a8:7e:38:78:a7:fb:87:0e:1c:99:52:b8:b4:e4:20:a7:d7:45:
37:08:ea:f9:ad:f8:99:d5:ea:82:cd:0f:87:67:9a:bf:f2:4a:
52:6b:c6:9d:39:eb:75:fd:d7:bc:0b:96:58:ca:7e:68:98:8f:
69:93:c1:c0:09:16:c2:c8:dd:6b:20:d7:c3:5c:b3:bc:6d:0c:
91:78:1e:c6:1b:6d:f6:9b:4d:02:18:1b:51:35:0e:09:27:08:
ca:ab:da:bd:69:20:03:e6:b1:32:18:57:20:30:34:39:b2:cb:
0a:b7:7e:d3:c9:55:b3:02:34:ba:66:9d:bd:b7:5d:68:0c:ce:
ed:9a:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:44 2025 by rpki-client