Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: rsc43UVEKsJx4Z+umBqElh1m0po4WJN472KIom4OvY0=
Subject key identifier: C3:09:3D:DA:82:4E:C4:40:94:C5:02:AD:BE:2C:DD:92:66:F9:F4:D8
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 0198D65F54227C75603485218B84C492A02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 14E8
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: OOBvrX0XtqyqBoE5mQ0qJUGnUP6BDxP4J+WRfdeyslc=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:54:22:7c:75:60:34:85:21:8b:84:c4:92:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=c3093dda824ec44094c502adbe2cdd9266f9f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:ac:32:9b:e5:21:18:87:c3:40:e0:98:9c:
b2:12:74:1b:58:1e:f5:08:3a:83:9c:20:42:55:7e:
53:d7:f7:cf:db:35:bc:ca:34:72:e8:79:b4:c2:95:
3c:a7:f2:19:fe:92:ab:66:ea:4c:18:c1:ff:7c:2e:
43:85:b3:c6:51:a2:9e:38:12:9a:a1:5f:d6:a4:fc:
84:2c:8f:8d:89:9b:b0:da:87:98:7e:f5:e9:0f:04:
b8:c5:91:94:67:a5:6c:cd:48:bf:1d:ea:ca:5a:0a:
67:c9:70:a2:f6:b6:82:fc:0c:4d:4f:a5:d5:ed:b0:
7e:32:dd:c4:62:fb:a6:a8:34:68:95:85:8c:1a:d2:
91:2d:5d:74:09:b3:7e:de:8c:ff:c4:7c:a2:e5:77:
d2:57:a8:e9:cd:8e:f3:e0:58:75:e9:9a:64:aa:f0:
63:e0:24:a0:cb:c0:c5:2e:ba:07:59:1b:cb:c7:07:
f7:76:f8:e6:26:6e:fb:fa:97:8e:bf:a3:59:b5:6d:
ae:24:af:25:d5:74:4b:c2:a1:d8:48:13:7e:89:d7:
fc:c8:29:f4:50:b0:75:06:a9:68:73:02:a8:4d:f3:
ff:17:4d:19:c1:2d:07:cc:4b:b6:3e:87:c1:3f:bb:
3d:b9:ee:e5:ff:60:37:c8:f3:00:93:b2:1e:b8:6f:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:3D:DA:82:4E:C4:40:94:C5:02:AD:BE:2C:DD:92:66:F9:F4:D8
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:68:e8:ac:07:ce:ee:2d:27:fc:a8:f8:d2:31:65:d4:1e:
6f:84:8b:56:12:d6:32:e5:66:ed:10:2e:78:3b:5f:9a:7d:10:
ee:1d:f1:bb:5b:35:cd:a1:d3:7a:d7:76:5e:33:5c:35:96:c4:
a5:48:6d:df:bb:bc:4b:a2:21:2f:16:e8:5f:9f:59:75:af:38:
12:b7:5b:83:d1:de:20:33:55:17:94:03:be:f8:c4:9a:7e:e6:
72:b0:9a:27:ba:c9:e8:49:47:44:85:d2:87:07:cb:76:c1:bf:
fc:5e:09:76:b0:ae:35:fb:fe:de:5f:14:01:a3:74:39:84:3a:
32:c1:92:62:1c:72:0e:40:4e:70:56:a1:35:06:80:ea:43:ed:
80:f1:dd:a1:3c:1e:1f:70:cf:8c:ab:c5:48:71:32:92:73:8a:
81:32:05:70:2e:75:ec:db:03:9f:4d:06:2f:a0:db:00:88:52:
11:fa:b6:f1:fb:58:11:20:a9:ce:eb:3d:13:25:07:2e:15:67:
da:0e:47:21:7c:01:a4:1b:4f:bd:ff:ef:9e:c2:40:36:23:63:
d6:6a:59:3a:72:9a:2d:ab:26:db:6a:32:2b:65:57:5b:f1:77:
75:c5:76:c1:5d:d4:df:69:ad:3c:b6:63:2a:65:72:7e:b6:d3:
a4:80:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:36 2025 by rpki-client