Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: qJESPlpkyNUW8zy5WoDJptf/csyu1G8Rgu7tyK5dIUY=
Subject key identifier: EF:9E:3F:DB:E7:65:C0:F0:44:52:6D:E0:EE:40:12:EB:83:18:6D:EE
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 0198D5F1ABD3988E63BF84A80ADF713AEF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 12E6
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: O40BgpN6yVo3QDI4QCjn5PGkC0sZIaLWqmPorSylDi0=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ab:d3:98:8e:63:bf:84:a8:0a:df:71:3a:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=ef9e3fdbe765c0f044526de0ee4012eb83186dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:29:95:b8:b6:a4:d5:4e:44:14:9a:03:2a:
ac:e6:a5:12:11:17:29:d0:c5:64:cd:7f:5b:53:eb:
ed:1d:d5:00:66:4c:a5:9e:be:a7:d3:84:73:99:4b:
68:2c:cb:64:b4:10:dd:ca:fc:77:a5:9b:92:3a:90:
14:a3:06:7b:f5:ca:0a:0e:89:9d:9d:fd:56:2e:c8:
d1:93:59:cc:a8:f7:99:45:69:62:72:bb:1e:b9:6c:
3e:b0:99:5b:99:86:5e:27:de:2a:f8:17:a5:83:94:
23:75:07:f1:39:b7:86:3a:32:bd:79:ea:04:09:7e:
71:31:b2:4e:c7:80:fa:67:03:09:9e:11:15:22:14:
4e:d0:bb:49:2a:d9:7b:97:35:fc:03:1d:8f:c3:13:
43:e9:37:cf:df:3a:dc:68:4c:83:f3:ca:6e:fb:52:
70:ef:14:03:8b:d5:d3:dc:9a:e8:ef:9b:e9:d0:0e:
33:98:fb:e7:e4:4b:78:cf:82:70:ec:a4:6c:6b:67:
74:62:9e:eb:70:f6:3a:bd:48:99:66:b8:22:f9:4f:
61:8a:c4:28:71:56:a0:2a:40:d0:f5:06:c6:a8:d4:
ef:64:a9:bb:6d:95:f9:49:44:28:a5:86:08:db:f2:
8b:8d:26:3e:85:92:73:7f:dc:d1:3e:03:d4:c4:34:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9E:3F:DB:E7:65:C0:F0:44:52:6D:E0:EE:40:12:EB:83:18:6D:EE
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:7a:f7:d4:b2:96:59:c4:6f:23:23:48:33:6f:38:3b:53:
95:38:89:fb:37:44:5b:a0:33:28:07:57:c7:10:e7:02:95:d0:
0a:4e:35:7e:83:bf:da:96:8c:d3:69:c3:5c:70:88:db:3c:f2:
f7:92:f7:c5:1d:1f:a4:8f:f0:a2:de:15:d3:0e:d0:8d:33:68:
ea:c7:47:d0:2f:49:29:a3:d3:4a:f7:0f:f5:26:38:42:5a:0a:
35:6d:76:1d:5c:a0:a4:33:12:72:b5:cc:14:21:a8:b2:b5:2d:
9a:19:14:49:01:cc:90:7e:ed:af:91:4b:49:4c:31:ab:06:2d:
7b:23:c5:18:22:1f:a0:24:4c:5e:eb:90:46:b1:9d:4f:d7:c8:
a1:6f:bc:be:48:5e:69:b5:70:81:ad:19:db:0e:20:f6:a4:f3:
8f:1b:c5:b3:f3:7f:0b:26:75:e1:7f:c8:ec:d8:b6:12:2d:8c:
e7:02:c7:bd:4a:64:5e:28:52:20:be:53:20:8a:35:20:7f:6e:
ee:71:ab:a6:cf:89:c5:95:67:d2:fb:63:b9:93:fd:ea:e3:cc:
f9:fd:60:1b:84:6e:5b:c0:21:fe:cf:5a:a5:b3:94:e1:f9:05:
07:1c:99:29:ab:d4:8f:a4:46:f7:2e:ad:d7:cf:d3:af:56:23:
da:25:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:20 2025 by rpki-client