Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: xa+2xotj+0P/5F4DCBMU96bvs6jHK4DKskO4Ba/MCWU=
Subject key identifier: 1A:66:7D:DC:FB:7F:79:50:53:D0:AB:14:1A:E4:88:5B:FC:FA:8E:21
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 0198D69886A888318FAB562E4BF9AF62ED4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0766
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: 4ovoFU2FcgBNdVC9YDddBfoqZZxpc6bm470LW0rf+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:86:a8:88:31:8f:ab:56:2e:4b:f9:af:62:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=1a667ddcfb7f795053d0ab141ae4885bfcfa8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:20:a2:56:97:8a:07:33:de:41:31:e4:05:
b8:2b:08:fc:1a:92:48:c8:22:fc:9e:08:3a:03:e7:
23:3e:b3:47:37:38:49:32:9d:01:26:e2:5a:5d:3b:
6d:e7:9a:36:9a:1f:fe:e7:d0:d2:4f:d4:a6:49:bc:
8d:4b:5a:e1:7e:24:4a:a7:95:2c:82:e2:f8:a8:71:
7c:63:c8:8c:b6:e8:0e:2a:0f:ff:98:f0:43:1e:35:
c0:47:86:58:58:9d:99:b5:1a:47:8f:a1:94:6c:d8:
c4:5d:cd:32:83:a5:db:f8:53:b2:14:61:64:1e:a3:
3e:54:cf:dc:03:a0:01:05:84:6e:4a:6c:26:45:2c:
45:d4:56:6a:56:45:f1:6a:b1:9b:36:76:6b:18:93:
97:93:a5:75:df:e9:ad:cb:7b:40:7e:0d:2f:df:fc:
c5:b7:11:92:be:d5:55:49:c9:23:6f:ab:8a:45:72:
eb:23:5b:bb:f8:22:f0:9c:16:28:9a:2f:db:4c:81:
4b:62:8e:1f:d5:9c:3b:e4:e4:96:e7:09:75:c1:32:
8e:ae:65:77:aa:ad:74:52:4d:4e:ec:91:d1:c7:6a:
9d:aa:e9:c3:6a:d2:ff:bc:97:11:9d:33:78:a0:1b:
19:f1:01:b0:50:36:97:3b:52:aa:04:f9:a5:9c:02:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:7D:DC:FB:7F:79:50:53:D0:AB:14:1A:E4:88:5B:FC:FA:8E:21
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:9c:86:29:52:c0:ec:6e:02:6d:e6:e6:50:79:81:7f:37:
d2:ef:ea:ee:83:b5:3a:bc:84:92:7e:50:ac:da:b4:a0:68:3c:
87:ed:a5:f7:ce:9d:ae:0d:72:ff:23:71:9f:b1:d6:49:d9:94:
5a:5e:f9:eb:62:b9:00:b3:ce:a3:1e:50:20:a7:b7:ad:f0:8f:
38:3d:e0:9f:a1:a4:10:2e:0d:a5:55:6c:50:53:23:cd:3a:35:
90:20:01:2d:e6:28:fd:94:3b:06:3e:07:49:67:ee:b9:83:0c:
ae:f5:21:23:25:c0:c3:d1:3c:c8:19:5a:ef:43:92:25:2d:d4:
a0:81:5f:03:a1:25:1f:9b:ca:8e:7c:71:18:3f:e3:93:25:01:
ff:9c:91:e4:0b:9f:e1:0c:ce:2f:b3:a6:82:75:d0:04:20:6a:
9b:f4:0d:5f:ec:d6:16:50:1b:49:8d:f2:00:00:21:cf:c4:bc:
c7:c2:bb:19:01:f1:56:79:bf:e8:82:38:30:ad:3d:7d:35:6a:
6f:d1:7b:84:23:b2:41:62:66:01:43:93:50:aa:0b:c2:bf:e3:
3b:aa:e9:8b:35:b6:b3:81:8f:40:43:89:6b:49:78:20:d1:15:
ae:c6:30:2e:97:ac:e2:07:ab:ba:ab:e3:8b:d3:b3:09:f7:b5:
ac:14:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:47 2025 by rpki-client