Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: rG+RAkSFmGXL7niVbbu7U7djdpAGrO7PWJEHpnXfqRA=
Subject key identifier: 66:C2:F7:54:09:B5:86:33:D7:52:1B:5A:76:AD:10:DF:DE:B2:F9:5F
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 0198D705BA988EF3B53110D352666D52E03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: NLUafBqWSQespn1QVjJL7Fk34QaiW3aki03YS3SVjnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ba:98:8e:f3:b5:31:10:d3:52:66:6d:52:e0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=66c2f75409b58633d7521b5a76ad10dfdeb2f95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:4b:5c:99:9b:3b:70:23:c7:ad:ed:0d:6d:
7e:4b:97:54:2f:66:6f:a1:47:eb:32:6b:ff:a7:c5:
82:d4:64:66:51:41:56:1b:f7:20:b6:a4:ca:58:29:
e7:6d:e0:da:e3:b6:dc:60:f5:d8:03:0d:20:f6:17:
c7:e2:84:cd:cd:cc:79:59:17:b1:01:11:64:37:2c:
0f:8d:08:3f:d7:14:52:02:1a:36:3c:24:7a:f7:b0:
2e:89:c3:65:6b:fc:c8:42:79:a3:ce:ac:2d:c9:39:
ea:6b:b2:ad:3e:3d:e3:14:25:5b:90:46:83:af:44:
91:c2:c3:e5:af:06:87:6e:aa:1e:16:0f:46:60:37:
f4:3b:2b:06:f0:a8:f5:5b:11:0e:f5:7f:bc:64:0c:
bd:80:0c:15:a6:80:5a:64:af:96:c0:48:00:44:11:
26:5d:e5:0b:8e:45:eb:fb:d0:6f:62:ad:93:85:fa:
34:8e:51:6e:52:83:21:64:da:79:ff:20:55:1f:8d:
08:5d:11:b7:43:50:e3:b1:1c:2a:32:0c:14:cb:7f:
03:2f:f1:6f:67:4b:62:c6:00:e2:0c:c3:d7:11:7e:
6f:34:b6:38:8c:a8:77:80:a0:a1:75:64:92:68:3f:
86:73:eb:17:98:3a:9b:bb:84:d7:e1:c6:c4:39:e8:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:F7:54:09:B5:86:33:D7:52:1B:5A:76:AD:10:DF:DE:B2:F9:5F
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:a1:ef:36:7c:c1:f2:09:3e:25:24:4a:6f:92:05:09:77:
56:93:12:7d:11:e3:9c:67:7f:26:bf:8d:b5:a8:91:be:66:c4:
83:9a:da:3c:98:6f:ad:0c:bb:86:32:24:3c:f5:62:e6:13:36:
1d:b3:4e:90:fc:6f:71:11:dd:1c:ab:50:8b:59:99:6d:0c:47:
7e:42:76:3d:fa:c3:4e:78:e3:db:3c:65:8a:43:53:c2:19:d7:
dd:53:d7:fe:1f:63:d6:29:24:72:65:53:a1:8e:92:0b:e2:2b:
e0:ce:b7:cb:80:5e:d1:8e:e6:ef:ae:9b:87:9c:03:df:25:94:
0e:9b:87:a1:38:af:c4:3f:1e:42:38:d5:c6:c3:2a:e4:ac:4a:
73:ad:71:d6:95:98:2c:cf:d3:74:ec:d1:a7:54:ad:48:70:b8:
5f:8a:aa:80:dd:02:78:34:ea:69:71:ce:9a:9c:ce:e5:86:55:
3e:43:3e:ff:3b:78:22:58:ec:86:7c:73:fc:32:1d:c9:56:7f:
17:34:69:35:8a:67:73:6d:ab:0e:6a:23:0c:fc:39:a5:b5:59:
33:86:5f:97:4d:ac:e1:0a:9d:3c:e1:75:2b:85:71:8a:71:33:
39:d6:7d:e6:6c:fe:16:5a:54:47:d6:b8:f5:e6:a0:b2:d2:b2:
8d:e7:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:13 2025 by rpki-client