Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: tI/+XiVnbYiM/5AQjNQFGT7QknkGGQ6mWJcZx9mEjsg=
Subject key identifier: 8B:A4:11:DB:95:31:0B:29:24:3B:D7:AB:1F:9D:B5:71:E5:63:90:F9
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 0198D47402A4DB85567D37E6B91E4C2D8B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 09A3
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: yhn9/kpS34E8kds4kfGLZwOxZgMzwn1i9gI7AkvOH0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:02:a4:db:85:56:7d:37:e6:b9:1e:4c:2d:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=8ba411db95310b29243bd7ab1f9db571e56390f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:57:b0:4f:e8:ab:3a:8b:33:b8:6f:a3:71:
ba:5e:15:80:92:0e:5f:1f:06:61:64:c6:64:99:28:
c9:00:c6:16:3a:8d:4d:11:7d:36:26:b6:92:ee:17:
0c:05:18:53:de:eb:38:ea:94:92:c9:9d:d6:f1:8c:
ed:35:3f:07:4c:fc:53:a6:3a:82:db:36:7a:12:fc:
00:39:7a:11:63:29:06:0d:ff:b3:55:55:67:45:07:
5c:23:88:7a:7b:10:8d:3d:2a:00:0f:01:3b:ec:ee:
d6:8b:49:a5:bb:4a:7c:46:76:5c:e6:91:5f:5d:65:
d1:26:89:0b:2c:ee:db:76:a1:20:34:e6:05:b1:95:
72:ec:a8:f5:e5:ce:9d:74:c9:88:2f:17:fa:23:28:
8b:ce:f9:a2:fd:87:e2:1d:03:70:f4:2f:6f:b9:23:
0b:14:33:8a:50:f8:bc:88:f1:0f:d9:16:f5:d0:55:
00:92:77:2f:43:26:05:31:77:9b:31:0b:5e:27:1e:
90:7a:a6:b6:d4:25:96:38:ae:9b:1e:00:56:3c:ef:
fb:ca:ac:10:5c:95:61:8f:4a:85:43:48:92:ee:91:
c8:0c:df:f5:cf:b7:d3:44:79:f0:51:b3:d6:be:e7:
16:7a:2d:3f:b2:f6:99:3e:d0:b3:de:62:bf:af:72:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:11:DB:95:31:0B:29:24:3B:D7:AB:1F:9D:B5:71:E5:63:90:F9
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:aa:af:66:db:77:98:4b:68:68:fc:36:f5:5c:e4:7b:f4:21:
4f:f7:4b:9b:5a:f1:db:7a:42:f0:a5:79:12:09:ee:db:74:cc:
1a:82:f1:95:0a:32:a8:0b:12:2a:d0:de:a6:fa:c9:41:e8:b4:
e6:33:d1:bc:bc:c7:1d:d7:9c:67:0c:29:0c:41:fb:cd:ec:8f:
72:41:ad:ee:ba:94:60:6f:b3:ef:ef:60:46:52:af:5b:ea:ec:
77:7d:11:d2:4b:6d:95:c2:bc:20:14:f5:5d:81:30:d8:fc:82:
30:cb:31:25:0d:5f:37:5f:2b:c2:1b:d9:95:df:e6:6d:b3:66:
dd:23:46:52:0e:68:95:70:af:5a:f5:0b:72:7b:15:c8:20:4e:
9a:5e:2e:83:8b:bc:f0:12:d8:ae:78:c4:68:0b:b4:0b:d6:88:
8b:0e:b8:ea:7b:f6:59:ed:7e:d5:31:1c:73:48:57:91:73:dd:
02:18:65:a1:75:71:cd:f8:54:cf:e1:7b:b7:3e:e7:29:7f:5c:
7b:8a:d2:ba:30:9e:cb:62:11:2c:91:f7:00:36:fa:8d:ad:df:
b7:be:82:d4:7e:5b:63:94:ce:53:9c:91:f4:e5:9e:58:ef:95:
07:c4:19:75:1d:f8:3d:1e:94:7f:4e:2f:b2:60:fd:ad:b2:03:
0c:e0:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:20 2025 by rpki-client