Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: e75HZLPCndMxBNO0Grrrfrg03Zqbm2LLBKdawfQVwNE=
Subject key identifier: 87:24:82:5A:7D:3C:10:78:B9:0F:32:69:E8:0C:B6:4F:A6:B5:5C:BD
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 0198D96056393C869D197A4F1771C0829932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 15DC
Signing time: Sun 24 Aug 2025 00:00:25 +0000
Manifest this update: Sun 24 Aug 2025 00:00:25 +0000
Manifest next update: Mon 25 Aug 2025 00:00:25 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: CqChH6ICVEPa8c6Xg1uLWpXrlrmmwNG6qR+Vw/K0x3w=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:56:39:3c:86:9d:19:7a:4f:17:71:c0:82:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Aug 24 00:00:25 2025 GMT
Not After : Aug 25 00:00:25 2025 GMT
Subject: CN=8724825a7d3c1078b90f3269e80cb64fa6b55cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:58:b2:64:94:62:04:f0:74:4d:9c:8f:51:
77:5e:51:b7:7b:25:96:b0:4e:2d:b7:c0:0f:03:ab:
5b:af:5f:17:5b:56:2c:87:0b:22:52:b3:56:7d:73:
67:36:bb:fa:35:34:f9:bb:44:0e:16:9f:df:74:c5:
b6:3a:92:32:4b:5c:39:36:aa:8e:fc:fe:68:16:a4:
eb:cb:11:ca:51:cc:a7:9b:10:24:29:34:42:68:33:
6e:7f:90:08:70:89:b6:03:c3:81:e1:4c:ad:dc:3f:
c3:8f:27:61:4f:8f:02:48:0d:e0:c3:ec:2f:55:07:
97:5a:49:c1:8b:bb:a9:42:97:06:bf:0a:d5:ed:db:
14:a2:a5:14:72:6b:6c:f9:07:e8:f6:44:1e:89:a6:
8e:f6:88:62:af:6a:2c:b1:cf:53:b8:17:7f:55:ec:
72:b1:fa:de:89:32:ef:c3:95:16:f3:0a:95:02:56:
c3:32:c6:69:88:76:59:14:75:db:60:bc:28:d3:4e:
b3:8a:17:aa:54:60:ad:82:10:16:f4:71:64:d9:aa:
27:60:15:4c:cd:98:7d:f4:04:d2:60:8d:7d:93:4d:
97:02:c3:8e:00:65:14:aa:52:c9:3f:c8:f7:29:db:
a3:07:0d:2e:c9:25:38:e5:ee:88:94:d0:b2:e3:c0:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:82:5A:7D:3C:10:78:B9:0F:32:69:E8:0C:B6:4F:A6:B5:5C:BD
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:37:32:12:55:f7:37:be:70:01:52:65:e2:73:4a:6f:dc:57:
bf:3f:f7:86:83:6c:3c:87:5a:39:1d:e4:3b:64:2c:a7:cb:5a:
7a:31:4f:9b:5f:18:34:d4:e1:ae:10:a2:c8:ab:e3:90:b7:09:
f4:78:3a:47:0a:4e:3f:45:26:d2:06:7d:df:8c:7c:e0:db:ab:
1c:93:33:a3:c1:22:4c:6e:46:61:71:79:37:ac:f5:04:f6:48:
05:54:97:16:b9:d3:eb:d4:bb:56:a8:8a:54:e7:09:29:bb:30:
a4:b1:68:31:54:72:81:05:7d:36:d7:43:86:62:8f:46:e3:2b:
db:7e:6e:93:4d:94:71:5c:8b:4a:e4:fd:2f:53:ae:96:ec:83:
a8:dd:de:e8:7d:f3:b0:2e:38:f3:1f:43:f7:3d:8d:5c:3a:e2:
c5:aa:ca:46:ce:f1:75:3a:dc:71:38:c9:fa:fb:6c:70:a9:db:
cb:38:cf:2c:0e:3c:a0:8b:92:72:00:1d:9b:64:cd:79:21:66:
30:53:e0:a0:d3:6f:de:ae:3b:24:a2:d1:e6:10:ad:e8:38:72:
7d:ff:07:ce:17:16:52:94:f9:27:ce:7a:6f:8c:65:74:5b:2a:
a7:77:07:cf:0d:7f:8d:56:3a:7a:89:33:75:58:99:d7:25:06:
c7:c5:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:48:45 2025 by rpki-client