Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: LelDQ4qGVHN8UyFvbYdk91rwC/SQVgaUFw0FHsRdMOw=
Subject key identifier: AC:F7:5F:5F:FC:2E:F7:8B:1B:B3:A7:AC:79:78:F3:AD:F9:41:AE:FA
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 0198D4E004641F83D88DA7EA01F8BBCF5EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0E38
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: ScOcLczxd8+ZJJhEqoL/NsIrG6Y9DnqAmZQ0/QFByHY=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:04:64:1f:83:d8:8d:a7:ea:01:f8:bb:cf:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=acf75f5ffc2ef78b1bb3a7ac7978f3adf941aefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:7b:c6:70:84:d1:86:95:84:44:ab:86:6a:
57:47:c8:6d:4a:fb:17:b7:4d:43:06:39:5a:d9:96:
84:6f:cb:18:20:b0:81:d9:77:6f:d9:20:3e:d7:98:
24:4d:81:81:3f:6e:52:19:26:d3:1f:dd:93:d9:08:
11:a8:1e:77:0b:7f:8a:50:d1:fd:6d:b4:eb:3a:c3:
b4:ca:f9:42:38:08:dd:11:cd:6d:4e:5a:ec:79:0c:
c6:96:bd:13:9a:f5:28:e9:7d:5b:1d:f5:1e:20:61:
44:72:ba:41:1d:2d:8a:5a:bd:bb:20:61:33:59:33:
28:de:3b:c8:7f:77:01:d6:3d:73:33:6b:ba:93:68:
80:45:18:bc:4b:f1:33:e1:14:f8:d6:1c:52:c9:e3:
6d:07:74:3c:c1:b9:52:6a:c2:02:64:05:5b:6e:52:
99:ee:1d:8d:73:eb:05:e1:13:f9:6d:da:83:88:26:
b8:a1:4a:cd:d9:b6:12:29:98:11:23:cd:5b:b0:04:
f3:63:b4:fc:ff:d0:c0:1c:d8:50:d8:1e:84:74:60:
66:ba:39:00:90:6b:bc:96:85:47:3c:dd:fd:66:73:
7d:1f:cf:9a:63:e2:26:40:bf:d2:a7:c9:0b:ba:7c:
90:d8:1a:1e:56:c1:10:79:b6:69:f0:d2:44:b5:53:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:5F:5F:FC:2E:F7:8B:1B:B3:A7:AC:79:78:F3:AD:F9:41:AE:FA
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:03:12:1e:0b:92:ac:4c:a1:5f:70:40:57:1f:34:f9:cf:
ff:b2:cd:54:98:bf:e3:c3:f1:cf:18:c3:ac:f1:70:3b:7b:f5:
2d:96:bd:55:f3:a2:c7:97:fe:3c:b2:20:fd:e3:20:93:b5:60:
70:cf:93:a3:f3:0e:15:96:82:39:22:d4:94:e6:88:56:62:bf:
5d:c8:1b:04:79:cd:18:71:9e:79:73:00:6f:8d:f9:f7:5a:5e:
1b:99:bf:30:ec:21:6d:1a:ba:d9:2d:32:62:d2:44:88:fc:dd:
3e:f4:4d:c8:cb:a7:89:41:4d:70:36:41:70:07:0d:ca:b6:b2:
58:34:ff:5e:b1:1c:ce:39:a0:d0:67:2f:a7:ee:96:3e:0e:b0:
9f:ce:bd:83:cb:0f:18:9f:8d:94:a5:56:cd:a3:be:66:dd:c9:
ac:dc:8a:85:92:75:f5:96:08:21:e1:e7:e2:fe:9d:ba:5d:97:
e2:72:d9:5f:07:25:4d:dc:81:a7:3e:e9:e5:f8:b6:4f:34:53:
c8:ef:bd:73:9a:64:a7:32:81:6e:02:7f:3a:0c:04:9d:db:bf:
53:89:36:2d:73:11:45:14:9c:c6:68:7d:15:e7:28:13:29:d9:
e5:33:33:95:16:b2:17:5d:32:82:e9:37:26:64:47:ae:cb:db:
fe:77:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:23 2025 by rpki-client