Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: CxXJMXOHwgjJpVMGh4Ijj+am2zdYF7nGB+i8wLAp9nM=
Subject key identifier: 4A:9B:C7:A8:5E:5C:94:52:56:9C:D1:C0:BD:11:89:A4:D4:1A:51:BC
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0198D583D68F95E6A335E5FAB71F07A0FA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: W19Y6ea1xaWfGen9C1cwbtY7WVGDLjPH9GROYfceioI=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d6:8f:95:e6:a3:35:e5:fa:b7:1f:07:a0:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=4a9bc7a85e5c9452569cd1c0bd1189a4d41a51bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:f5:b7:58:2b:45:7f:26:98:2e:d6:a5:09:
12:53:ef:8f:72:df:cc:e0:6e:c6:0e:a6:e9:44:69:
4f:5e:58:27:c5:9c:6d:c1:be:eb:b2:bb:d2:0a:24:
12:1a:04:35:6b:a5:7c:ea:03:4d:b4:e3:2e:3a:22:
99:14:7f:99:88:19:f6:95:a6:38:f1:8c:ca:97:56:
4f:1c:95:05:c9:f9:a4:9d:6b:63:3f:48:3e:7b:85:
8d:a0:02:f4:b4:3b:0a:ef:38:48:ed:f4:a2:9a:52:
5a:79:43:04:12:48:9e:65:95:06:58:e8:e7:54:e4:
8a:5c:5f:92:6f:98:f9:25:a4:95:72:ea:2e:95:62:
c5:08:89:e8:8b:89:7c:f4:15:8e:12:e8:ee:cb:7d:
b8:06:41:fd:66:73:a3:e4:0f:8b:ce:71:e9:35:bf:
71:6d:18:7e:1e:df:7b:25:30:90:bf:9e:c2:45:ed:
45:85:aa:59:06:a4:31:99:b0:70:6e:17:47:2f:e3:
a8:c8:a1:73:88:06:09:12:e9:df:55:27:30:d8:30:
00:83:35:30:a9:a8:9e:1e:39:4f:62:be:22:2a:a9:
34:00:85:95:dc:5a:ce:2d:b2:20:08:5b:5e:15:ea:
b4:e3:b8:0f:eb:ae:17:f2:af:15:bc:66:a9:e4:83:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:C7:A8:5E:5C:94:52:56:9C:D1:C0:BD:11:89:A4:D4:1A:51:BC
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:8e:23:aa:f6:0c:67:71:91:a3:a7:02:ac:0f:b0:7a:54:
a5:c6:bc:f3:11:34:fa:fc:a7:e6:e5:1d:28:12:54:3a:b2:83:
3c:cc:c6:2b:91:29:b4:09:43:7f:33:d5:a4:d7:a2:7d:19:ea:
6c:98:98:43:4e:f6:c1:76:9d:c3:69:88:b5:a4:a3:c4:20:38:
68:6d:21:9f:49:c6:d3:11:d3:cf:09:41:03:38:69:0c:7f:2d:
69:58:8e:31:81:fc:c8:56:73:a5:eb:06:0f:b0:3a:8b:fc:6b:
1b:70:2b:1b:3b:1e:4a:2e:af:aa:03:a4:a6:d0:ef:de:f6:7e:
73:c6:20:49:bb:6d:38:53:40:14:4d:64:16:78:2e:f3:92:57:
33:cd:81:7e:06:9e:f8:62:86:c2:7d:e7:5f:1a:70:35:29:99:
83:25:9b:30:27:f5:d7:4d:7d:47:f2:69:61:d9:dc:b9:fb:c7:
22:04:43:a7:6f:df:e2:45:9c:76:4b:9e:22:45:51:50:f0:97:
47:1c:38:58:33:28:94:cc:a4:94:54:18:3d:5b:f6:5a:6d:a0:
67:41:87:cb:70:61:a1:19:17:44:ec:e7:c7:a7:fe:a5:13:53:
49:b4:7a:35:7b:17:7a:9c:74:43:c8:03:00:59:b0:fd:b5:33:
d9:a7:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:44 2025 by rpki-client