Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: LNTEewM6OvUSDEKMb2knw4/aStgwaQ2vq95e9so7ddA=
Subject key identifier: 90:D8:41:F2:B0:A6:E6:2A:C8:B3:3F:FA:79:E9:E9:23:60:2E:77:54
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0198D58376304C5A4CAF645AAC42787A0BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0D8E
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 4M9aMe3BGaBgDA+23lrBvkPG12URxKLHhOMGnfYfC+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:76:30:4c:5a:4c:af:64:5a:ac:42:78:7a:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=90d841f2b0a6e62ac8b33ffa79e9e923602e7754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:14:5b:1d:0f:8c:d2:63:fe:cf:0c:1c:b2:
f0:d9:90:89:b1:b1:e5:7c:14:4d:29:13:93:1a:4a:
13:40:44:3a:cd:a1:11:3f:c8:12:db:41:62:0d:16:
43:18:37:cb:4c:dd:06:8c:d3:91:98:55:0a:be:59:
0f:05:4b:67:1f:3d:58:cc:9c:b9:08:b6:a8:76:c2:
8c:13:13:a5:2a:8f:38:44:c0:21:9c:54:30:c9:e9:
94:f6:55:c7:0b:a4:ab:17:80:cd:4b:e4:d2:13:38:
3d:ef:e1:40:67:e9:37:78:1c:c8:c7:fe:a9:a1:7b:
10:04:fe:39:11:85:37:30:1a:c9:65:ac:6c:2b:7d:
db:f3:1d:f1:65:59:7b:d8:43:71:23:ac:52:a2:5b:
2b:0c:22:f8:25:02:b8:25:b5:dc:07:59:89:23:b8:
fd:64:d5:f7:a3:c8:be:dd:db:3e:86:64:f6:91:59:
23:9f:f0:7a:ef:36:bc:06:1a:53:1e:e3:7e:d3:10:
ea:b6:9d:25:fb:31:0e:1f:5a:f8:bc:b2:6e:bb:4c:
61:65:ee:0e:c9:c9:ab:25:40:b3:8c:4f:50:e7:62:
42:fd:96:13:46:4e:9c:4c:85:1e:43:08:27:4a:ff:
db:b1:b8:a7:b6:a2:ae:8a:35:d2:86:e1:88:b3:0a:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:41:F2:B0:A6:E6:2A:C8:B3:3F:FA:79:E9:E9:23:60:2E:77:54
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:70:c4:b9:21:f7:2b:e7:09:d6:cb:01:da:15:ea:dd:2d:
d1:6a:f5:8f:0a:e4:f8:17:0a:1d:62:4d:77:13:68:b1:20:7b:
95:56:74:1b:f9:ce:5d:ed:f9:5e:c4:d1:6f:00:73:a7:59:51:
30:6d:1f:fd:27:2b:19:b5:37:7f:43:7b:81:d3:0f:4f:0a:af:
ac:69:28:ff:9f:24:6d:b5:c3:e7:ef:33:0a:9c:5e:d0:dc:c5:
1b:b5:39:13:a1:8b:e0:0d:ba:e7:71:9d:0b:d9:1c:e8:af:32:
1a:b7:88:41:87:44:55:22:c1:3b:f6:ab:99:f4:e4:b0:08:f2:
3f:b6:f9:33:ef:91:1c:9d:7b:af:bf:c5:a2:de:21:35:c2:d2:
bc:0d:46:d5:df:00:7b:25:d1:75:a7:3e:f1:a4:89:5a:77:20:
38:a3:13:1d:2c:6f:8a:02:28:18:25:52:8d:93:5c:42:da:10:
70:92:bb:38:a9:53:33:12:14:4e:7d:40:08:19:2e:04:d8:b8:
86:f7:19:e8:14:6a:8a:a4:51:45:7d:09:c3:90:0f:bb:f1:cb:
50:44:83:f4:70:91:1f:25:c8:f9:27:e0:70:7d:78:03:ef:ab:
a1:1a:23:79:fa:46:24:fe:84:09:c1:49:51:3a:1b:ae:a3:f7:
db:9d:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:20 2025 by rpki-client