Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: 4WfyS4wCB3RSXQXoyvdjWPHIXHzQGeBF0iNPo+GH4D0=
Subject key identifier: 81:C9:8E:EA:33:BE:3F:32:37:22:4F:17:E3:05:94:36:6D:60:8C:00
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 0198D5BBE071DDE76B1BD8B590029D111F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0254
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: 7XcuPpq/COMDIOu0OeinplZJ+rIkReigwj+VBAlieJM=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e0:71:dd:e7:6b:1b:d8:b5:90:02:9d:11:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=81c98eea33be3f3237224f17e30594366d608c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:c6:2a:e6:83:0f:8e:ef:6c:f5:06:46:26:
75:5d:37:65:6f:a1:24:03:a4:7b:c5:60:c6:68:66:
3d:49:bf:ce:e3:48:02:29:17:81:0d:4d:7d:17:43:
c5:1d:83:50:dc:2c:fc:43:52:16:2c:89:e6:ac:d3:
99:db:39:fd:57:03:3b:13:79:be:9d:b7:8a:92:d8:
b8:76:55:0c:a6:26:56:58:02:3b:7b:6e:eb:71:05:
ad:e9:56:eb:b7:6f:e4:db:d1:6d:6f:2f:f6:b0:6f:
d6:f6:05:15:ca:29:59:53:73:ba:74:f4:8c:06:97:
7c:7c:39:cf:fc:f8:9a:43:3a:b0:65:1b:3a:d9:69:
6d:0a:ed:3f:a1:d3:0b:ea:14:91:40:d9:9f:63:b8:
02:cc:62:97:08:4c:b6:85:78:c3:d1:ac:f9:96:33:
41:b5:8f:18:ad:bf:c6:bf:80:b3:2a:25:02:be:77:
17:17:36:7c:08:65:54:83:37:cb:e9:e6:5f:a6:24:
33:98:74:80:1d:68:f3:2d:2b:4f:6d:57:bf:43:31:
b5:5e:6f:a8:b7:ac:3f:2b:93:60:a9:18:19:2a:51:
46:19:4d:d5:1f:59:53:4b:e2:d0:b2:59:14:aa:71:
e6:d2:f2:15:8b:60:f9:9a:f0:0d:43:32:02:0f:20:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:8E:EA:33:BE:3F:32:37:22:4F:17:E3:05:94:36:6D:60:8C:00
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:0f:00:59:a0:81:45:f0:11:40:11:c4:81:02:f7:8a:51:
bb:cd:9d:bc:ef:ad:42:d7:8a:52:27:94:ac:92:31:62:04:22:
ce:33:fc:fe:b4:ef:54:b8:0c:15:57:9f:9a:01:ae:c6:93:c9:
31:04:f7:22:13:86:ea:84:91:93:10:55:bc:fa:2c:45:41:a2:
d7:4b:66:4f:e2:40:87:ce:de:aa:d7:99:4e:5e:d4:72:5a:ab:
5a:2a:89:c5:e5:8b:80:0a:00:48:96:a1:e4:ac:1b:f2:29:11:
26:08:24:a3:f9:37:0c:93:66:be:fb:4b:49:30:12:d4:cb:f1:
8c:8f:6e:f4:34:d4:f2:e4:e6:78:fc:a5:84:af:56:2c:ae:b3:
0a:b2:eb:56:0b:1f:ef:11:b1:61:44:1d:b0:6e:5f:de:21:5d:
b3:dc:4b:1d:4a:64:04:50:85:6f:14:d7:0c:6c:a1:f1:4c:9b:
43:49:1f:e4:58:6f:53:f8:be:cb:d1:64:3e:16:59:dc:ac:9a:
b2:62:c9:20:97:bf:39:4d:26:46:ba:3c:c7:ac:76:fe:29:3e:
7e:3f:ad:bc:eb:e5:1d:f1:4f:d1:93:ea:0b:59:d7:42:97:5e:
2a:fe:de:ad:35:90:9d:e8:f4:a1:d0:d5:94:a7:26:66:1a:79:
2c:0b:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:02 2025 by rpki-client