Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: LCcWeusMgV/XeA614/5J6TGDxHN35Emk6VW9nUlsPeE=
Subject key identifier: 99:BA:5F:4D:04:2C:1E:FE:99:E8:37:23:7D:10:4C:12:01:58:C8:3A
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 0198D6CD4BD581A88210EEB504F839D8FE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: EDvB7DO0cWFfKMvHghAld0+4MGmIrL0lwVUdoZod5Hw=)
2: THEjTsFNcxDVZEOdq3GfXqXC4zc.roa (hash: x5CBmcScUC+Y/Wuw5WgYT+dNtpSqSEasQSVqzZJLzc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4b:d5:81:a8:82:10:ee:b5:04:f8:39:d8:fe:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=99ba5f4d042c1efe99e837237d104c120158c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:3c:92:65:90:9b:b4:6e:8c:84:c2:2a:c5:
34:a4:2e:54:a1:84:f3:70:aa:9e:2f:04:41:68:79:
71:a1:ca:f3:69:30:8f:42:01:fb:2f:87:72:7c:30:
cc:d7:e0:93:a9:0f:d3:d7:d3:19:d2:ea:8c:56:1c:
90:ab:57:1e:36:1c:a5:dd:94:c9:05:43:9f:de:27:
e0:1e:4f:d4:ab:8d:c9:b6:77:3e:5a:6d:d7:cf:08:
05:66:fd:87:ba:67:b3:2c:d1:45:77:24:e0:bc:b7:
4f:37:68:9d:ee:59:f9:86:ee:4e:db:be:fe:83:df:
c1:30:81:88:cc:e8:3c:45:1a:5b:51:8a:24:8d:fb:
03:a8:38:1e:83:63:10:73:ef:d4:8d:b5:40:f6:43:
bf:2f:24:43:d8:d3:3f:51:33:8e:53:9b:91:de:6d:
14:84:25:81:48:3b:28:e8:45:c0:2a:c0:db:93:ff:
b8:b1:03:90:46:87:64:3c:ae:d0:25:d7:8e:19:0b:
c1:be:c9:07:af:6d:0b:0d:c8:73:95:b1:3b:44:ee:
72:a5:5f:36:86:e5:ae:bf:15:9e:cc:48:bf:22:20:
f7:88:d3:e5:4f:6f:13:b7:5b:ed:02:6b:3c:c4:7c:
f6:9e:c8:76:98:06:d6:12:cb:14:d7:6a:49:b2:b7:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:5F:4D:04:2C:1E:FE:99:E8:37:23:7D:10:4C:12:01:58:C8:3A
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:f1:45:2d:15:f5:e6:a2:07:a8:84:06:7a:8b:40:4d:bc:
23:64:e1:7e:1b:d4:d4:a4:8f:b2:8d:76:60:66:6e:87:55:18:
f9:a0:91:83:b1:41:a3:da:cc:27:0d:1a:b7:45:ba:7f:92:4b:
00:f9:4f:b5:ed:73:f2:93:58:05:e6:6c:85:b3:87:89:7d:ef:
a1:34:24:8e:77:92:32:c9:cb:03:2e:87:42:bd:d7:7f:eb:29:
bf:22:69:91:39:5c:eb:b2:ed:98:97:40:c8:ac:21:f5:4e:d8:
e3:2d:99:50:b3:f3:91:6b:d6:ba:06:c9:b5:92:c7:6c:60:71:
5b:80:39:e3:d9:49:51:0e:c6:9d:b8:ab:dd:32:8a:f0:3b:59:
33:a5:ab:70:c9:b5:45:65:9d:6a:b6:3a:f1:a7:a7:4b:9c:f7:
83:17:e9:89:45:58:54:55:7c:67:f7:a4:d4:8b:4b:63:05:ab:
b3:82:96:5d:2a:a1:11:4a:e7:28:c0:42:2b:22:be:ba:ed:4a:
51:26:26:8e:15:d1:5e:ca:9a:14:d3:ed:62:b9:df:73:a5:0e:
08:6c:e9:ac:d6:b8:55:a5:a1:40:81:0e:39:7b:17:16:6d:1f:
80:6c:9b:00:4c:d9:48:7d:ac:4b:76:59:3a:e4:b1:51:a6:06:
0f:2d:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:20 2025 by rpki-client