Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: NSa6tWrWL9e3dBl6NwqjbLvW8l55YP78EJRWvSvV8m4=
Subject key identifier: FC:ED:34:71:CE:A8:EF:00:AE:84:62:1A:20:05:5C:FF:14:E5:04:4B
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0198D8847C36749D56A7939F1B695FEFE510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0B6E
Signing time: Sat 23 Aug 2025 20:00:17 +0000
Manifest this update: Sat 23 Aug 2025 20:00:17 +0000
Manifest next update: Sun 24 Aug 2025 20:00:17 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: cT3tL7t2xZE1cEGgEuizrYOrepianNF3v4RNmDmxB0c=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:7c:36:74:9d:56:a7:93:9f:1b:69:5f:ef:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Aug 23 20:00:17 2025 GMT
Not After : Aug 24 20:00:17 2025 GMT
Subject: CN=fced3471cea8ef00ae84621a20055cff14e5044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:b0:a0:5a:54:1f:c7:67:d0:3c:54:1f:dd:
5f:fa:ef:d7:d0:88:af:42:74:cf:76:94:2b:1d:4f:
31:7d:13:83:bf:3d:1f:6c:70:2d:d6:4d:c1:fc:84:
9b:f8:1d:5d:2b:65:df:9a:a9:11:2d:f2:9c:f8:ba:
3c:f2:bd:d0:26:5d:7c:a4:b7:64:7a:d1:27:47:9c:
46:8e:21:69:f8:4d:64:96:b7:21:21:98:6a:7b:b6:
43:7e:95:56:59:66:0b:84:5c:84:13:77:19:5d:f3:
e1:94:cd:b5:2d:58:e4:f7:60:09:14:d1:f9:0c:5d:
5a:97:25:17:5e:e9:9d:4f:1a:21:13:86:ef:80:cc:
34:8a:a9:25:7e:17:cd:4e:54:70:0b:77:3c:6d:e2:
49:3d:2b:48:73:ee:03:89:8d:c1:5f:b4:02:bd:2e:
0e:3a:d3:9d:1d:d5:75:5b:8c:c5:6f:84:73:3e:4f:
64:89:23:80:ca:67:5d:af:e9:db:14:26:8f:7c:a6:
e5:34:94:f2:82:73:9b:64:27:df:09:37:78:12:94:
ce:49:a7:da:0d:f0:d0:eb:c9:a6:73:c4:39:28:53:
95:17:43:de:36:48:b1:d1:ca:75:39:00:2a:6e:de:
e8:1d:75:26:83:33:a0:ba:e4:fb:fd:40:90:50:68:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:34:71:CE:A8:EF:00:AE:84:62:1A:20:05:5C:FF:14:E5:04:4B
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:80:97:57:fe:94:3b:12:63:7a:21:a6:ba:48:33:79:de:
fb:37:04:fc:23:a9:2d:a5:51:c7:9b:ab:dd:55:aa:b1:ce:76:
2d:ad:09:9f:fe:a9:44:35:04:25:37:6c:0c:e6:09:26:bb:80:
91:79:3d:53:d3:82:68:58:11:67:36:37:a9:c1:8a:6b:72:6c:
f3:31:4c:c9:49:b8:3d:1e:e4:79:3a:28:8b:4b:5e:58:e5:a9:
95:f0:29:e4:eb:b8:c2:cd:4d:6a:da:b0:7b:2e:65:13:bf:87:
80:bd:1d:5b:32:37:37:7f:97:9d:d6:13:89:fa:74:8c:d4:c0:
4d:e7:1c:bc:b9:f8:77:ad:b0:51:0d:c4:81:a5:d3:86:37:08:
be:35:1b:7b:04:ad:e4:82:98:96:7d:f1:7e:73:cd:96:1e:4d:
af:e1:20:07:03:d8:d3:8c:96:a1:a6:51:89:b1:5f:fe:43:71:
eb:c0:20:02:4e:80:1d:15:99:1f:9f:19:ce:75:fd:af:e2:3c:
38:73:9d:c0:1c:f5:6e:40:9d:42:ad:ca:59:e1:a9:8b:b0:21:
ae:81:9d:5c:50:2e:65:97:62:a0:f3:52:1e:3c:62:8f:3b:47:
40:31:ce:91:c3:9d:4d:31:3e:8d:90:cc:6a:38:d3:18:e4:40:
f7:eb:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:15:45 2025 by rpki-client