Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: hDSk6utj5GHXIQrcJ5rEapXahUITcCZd2k5E35K55d0=
Subject key identifier: 7E:A1:14:03:83:81:FE:B8:FE:25:B7:30:A4:6F:CD:E5:77:DD:4B:29
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 0198D7A9670ACEA47264059164AA411C49BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0FB0
Signing time: Sat 23 Aug 2025 16:01:00 +0000
Manifest this update: Sat 23 Aug 2025 16:01:00 +0000
Manifest next update: Sun 24 Aug 2025 16:01:00 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: PYXoTkiuEDnSM8dJLgmSDoOPdQqfEAkgxImlgvduTyM=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:67:0a:ce:a4:72:64:05:91:64:aa:41:1c:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Aug 23 16:01:00 2025 GMT
Not After : Aug 24 16:01:00 2025 GMT
Subject: CN=7ea114038381feb8fe25b730a46fcde577dd4b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:05:a7:c1:93:d4:4c:0f:14:ec:48:07:ea:
70:2b:03:1a:65:50:cf:61:27:f7:b6:31:af:97:2a:
c8:ef:0d:32:70:9a:60:1f:fc:30:09:1b:89:85:4d:
24:96:4c:77:e8:2c:88:96:33:c3:11:6d:28:00:bc:
f9:f1:40:48:d8:70:5b:52:a1:b8:3c:1b:c3:db:3b:
3b:3e:d3:30:ba:10:67:d5:45:16:8e:4e:0b:ab:ba:
53:e0:74:4a:31:dc:75:90:50:2a:7f:bd:1d:8d:89:
83:dd:4d:a9:78:4b:cd:f3:af:b3:8c:3d:48:f8:90:
9b:77:e3:02:04:36:aa:ec:66:2e:92:dc:bd:48:07:
de:f6:e1:10:c6:79:d6:1c:2c:9d:1d:0e:6f:50:fe:
b0:3e:47:d1:78:6e:af:d4:ec:9f:4c:d9:76:1e:f1:
32:81:d3:4f:66:60:86:1e:94:2f:29:76:aa:d4:9f:
50:87:21:8e:f7:af:04:2e:8d:71:98:2c:a4:d2:13:
25:94:8a:56:d0:73:56:51:b8:c2:91:4a:85:83:13:
42:34:dd:b5:8e:a5:a5:9c:c7:17:7f:c2:95:58:4e:
82:da:8e:88:1e:cf:15:39:e6:49:f3:76:ba:88:77:
44:52:c9:0a:e7:6a:80:0b:b3:d9:56:bf:04:5d:c6:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:14:03:83:81:FE:B8:FE:25:B7:30:A4:6F:CD:E5:77:DD:4B:29
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d4:95:f5:68:1e:a2:44:a6:46:77:7f:e9:f3:cc:91:75:28:
2a:cb:03:9b:8a:aa:7c:b7:a7:ad:dc:b1:27:f5:80:d2:b0:19:
69:d0:ae:3d:7f:38:3f:78:f5:d4:cc:6b:a3:02:2c:6b:c2:bc:
a5:ea:11:1e:60:dd:2f:fa:01:6b:b8:6a:b2:d5:22:6c:16:4d:
47:31:39:82:29:d4:21:41:8d:d6:8c:8a:62:70:a5:cb:3e:4a:
16:18:08:1e:e8:0f:82:ed:58:e0:fb:67:a7:03:0f:8b:b2:e6:
51:09:cd:3b:5d:bf:c7:68:10:b9:d4:10:33:28:f6:36:52:eb:
ee:4f:5b:15:97:67:3e:b2:ca:70:9f:ab:7d:27:be:ee:65:34:
3a:3d:76:fa:c0:64:11:6f:25:2d:12:33:7d:ea:6e:f4:05:1d:
24:07:65:eb:30:0e:5b:8e:23:76:ae:b6:cf:c8:cb:b9:7a:4a:
0f:83:a1:52:50:f6:05:e5:22:57:ac:fb:03:c2:60:c5:72:66:
d4:22:2d:9d:f1:48:6e:e5:84:08:1b:21:c8:ac:04:5d:6e:71:
05:bd:7f:5a:89:ca:e4:51:ac:3c:48:4d:81:1e:0b:6b:01:aa:
1b:e2:ea:88:d4:1f:79:ff:2a:77:03:a3:b5:7b:0f:9c:50:41:
3b:ac:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:13 2025 by rpki-client