Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: o/HOY6PKY94TDE23qrduOouro+uNYmJJtzrx48rTdZc=
Subject key identifier: 7D:B8:E7:E2:2C:67:8A:A9:C1:45:C7:8B:2F:E7:B2:BB:64:06:95:E7
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0198D65F632075ECF60FA3514B34F37B5B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: gAaed3onQREbUwzgE1UCMkFyzyBDGfF/FHBEVZPVWKQ=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:63:20:75:ec:f6:0f:a3:51:4b:34:f3:7b:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=7db8e7e22c678aa9c145c78b2fe7b2bb640695e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:52:fb:99:4f:71:87:23:6d:df:09:ad:51:
9d:aa:bc:75:3f:d5:56:4f:07:77:51:6d:de:c7:ef:
02:bf:de:72:da:31:5c:84:2a:e3:c0:7c:35:c6:0e:
34:58:ba:3a:4c:4a:aa:9c:76:bd:95:ab:93:ed:69:
53:62:c5:37:41:08:d3:84:2f:46:01:29:a9:c8:0c:
b7:d4:8d:48:5f:ff:2d:c9:98:39:1f:fd:b8:7f:c7:
7c:31:2a:03:ac:ed:43:db:da:68:47:1d:24:4e:7f:
7e:85:c5:be:83:dc:45:a1:43:e0:5e:fc:f8:70:ff:
1e:36:1f:21:93:8f:c8:53:d3:2c:c0:2a:81:94:dc:
d6:be:68:63:1d:6b:28:e7:9b:64:f6:ff:2e:1f:c6:
0a:ab:a6:0d:d1:38:ab:bb:b4:de:9f:35:a9:26:78:
ea:8f:e9:26:5b:33:90:b0:1a:c3:26:dc:ed:35:4b:
77:0b:ae:1e:a6:74:39:2a:fa:79:91:0d:23:2d:4a:
d6:38:46:31:21:12:de:7f:af:17:08:90:3a:4f:f9:
aa:b8:af:26:bf:41:7b:ce:dc:e1:e2:12:9e:cd:0c:
12:8a:70:fa:a7:f4:4f:0a:76:d8:d7:96:fa:4b:53:
aa:27:37:e3:49:21:69:6e:a9:30:09:05:34:a7:13:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:E7:E2:2C:67:8A:A9:C1:45:C7:8B:2F:E7:B2:BB:64:06:95:E7
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:9a:df:d3:c3:d4:0d:3b:ee:42:d5:d5:07:d4:ce:85:dc:
b7:1e:d3:77:b7:49:7b:13:78:83:6b:cf:b2:c8:05:1a:8b:07:
94:99:e6:41:c9:e7:83:12:5a:b1:14:01:04:08:5a:ac:74:e8:
3c:d1:9e:56:f4:2c:42:2e:cb:9f:b0:58:1d:9f:ab:78:38:bb:
0a:91:43:46:44:44:0c:29:1a:dd:ab:f8:38:27:0c:ba:e0:c6:
a9:a4:2d:7c:85:c0:c0:66:da:36:9b:a9:60:db:bd:d2:67:31:
00:c6:d0:78:5f:a0:e8:37:65:24:80:f7:59:90:7b:53:a6:a4:
1b:e0:ef:f9:0a:f5:37:a8:bc:c6:c2:74:45:2d:b4:e9:af:15:
7f:91:51:73:34:8d:f0:fe:ac:8c:18:d5:9e:b5:27:8e:b0:b6:
3e:30:59:d0:95:a3:4d:4e:3a:d8:72:af:8e:39:4f:27:ec:b3:
0d:8f:48:05:49:94:d4:4c:f3:f4:97:08:ba:bb:cc:63:a4:f3:
ee:5c:71:a6:dc:fe:29:b5:0a:c6:af:8b:d5:97:75:b8:15:83:
86:8c:60:44:e9:32:16:78:af:a3:ef:18:16:3f:8e:c2:fe:e6:
73:42:a1:41:24:89:46:15:a3:33:56:53:88:9a:e1:a0:9f:b1:
53:4d:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:42 2025 by rpki-client