Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: NcQplNRQktL4SKWua/UWYXNg3Q+/6jRTjuGUPqkefyQ=
Subject key identifier: 3A:58:5B:9C:80:12:30:B4:92:9F:4F:41:53:94:D8:D3:57:AD:D8:30
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 0198D6608390A51585D5C600E29D5BC7123D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 09A9
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: oatUJh0zGQxEQbS/9jUN9IgILC6IwITFDj5+tYJd+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:83:90:a5:15:85:d5:c6:00:e2:9d:5b:c7:12:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=3a585b9c801230b4929f4f415394d8d357add830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:b8:12:66:24:4f:ca:07:ec:44:72:14:03:
ca:b4:e4:cc:dd:20:dd:44:fb:01:7a:f3:71:e6:2f:
4d:ab:8c:d0:2b:f2:e6:79:45:1d:4f:fe:52:5e:3b:
d7:19:1b:cb:2e:bd:ed:4d:ca:d0:a4:01:ee:3c:46:
15:34:1e:00:a7:c5:78:b5:a3:fa:4b:da:8e:44:6c:
dc:ad:96:e3:16:a6:bd:b3:62:8d:85:d3:6b:ad:bc:
1a:b3:57:3a:a8:c6:d2:f6:cd:27:9a:a1:f7:1f:ce:
50:54:d1:43:57:5f:b6:a2:ab:be:72:09:72:cf:30:
54:4f:a3:30:db:9f:a5:63:b1:ea:2a:83:5e:ae:9b:
de:57:6f:0b:3c:f6:05:59:85:d3:06:63:e6:88:ca:
56:db:96:49:9a:82:57:df:e1:7d:ae:55:78:9f:5e:
47:48:c0:b1:fb:8c:f4:58:ac:23:65:dc:ec:ae:dc:
8a:06:7a:6e:a0:e7:6d:f3:76:97:f2:b1:bd:fc:43:
20:28:e4:db:83:c2:82:56:8f:24:63:63:63:c9:ee:
df:41:52:a3:46:d2:72:a2:3d:4d:bf:49:53:2b:8d:
18:52:80:2d:99:06:72:5d:93:7f:7d:7d:7f:b5:97:
e7:08:a6:10:5c:ac:25:f5:a0:ad:6e:69:c9:66:0b:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:5B:9C:80:12:30:B4:92:9F:4F:41:53:94:D8:D3:57:AD:D8:30
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:73:9f:31:1a:c1:fe:29:cb:17:84:7c:c8:25:15:5b:07:
7d:07:be:67:da:3b:f3:a8:f5:c3:77:cd:20:4e:d0:62:72:6a:
7e:0e:8a:b2:3a:15:dd:6c:e3:c9:94:33:70:6f:a4:d7:12:45:
25:6c:33:20:8b:b0:8c:61:c6:5d:ef:44:ee:7a:14:9e:be:a0:
6d:b9:87:fa:13:b1:ae:fa:3e:52:03:8a:60:b5:88:61:2d:86:
d6:ae:60:3e:92:87:dc:2e:62:02:0e:63:75:e1:7e:cb:75:10:
0e:48:69:ec:07:6b:37:20:b1:9b:26:17:84:f6:ae:41:7e:b9:
78:b4:42:d3:4d:35:0d:ad:c4:e9:de:5f:b8:89:b9:ec:50:08:
d2:c8:56:a4:3d:6c:ab:ca:03:56:fe:51:58:42:7f:4e:c2:3f:
3a:ad:eb:05:3b:1c:ae:f7:9c:9e:1b:da:34:8c:96:fa:3b:f9:
3e:4d:b7:27:13:34:78:bc:a1:80:cb:33:1c:b8:6e:97:58:92:
b4:e0:b4:5d:4c:49:df:27:97:1d:5c:cf:e7:be:ba:30:9e:02:
91:c9:0a:f9:3f:85:1b:b8:61:e7:87:e2:b9:0d:09:80:c1:9f:
bf:54:06:ac:a1:64:68:58:80:b3:c0:54:69:03:d9:87:89:ac:
d1:dc:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:07 2025 by rpki-client