Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: sAi9+DLfG4L0BpJtL3gHjVgq060mk0bO4o/tpY7Kz9o=
Subject key identifier: 45:13:B8:F8:C2:A5:ED:37:59:79:D2:C0:37:AC:16:36:2C:82:4A:98
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0198D40476AD713EC9AFAB12BAEE326B9D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:01:58 +0000
Manifest this update: Fri 22 Aug 2025 23:01:58 +0000
Manifest next update: Sat 23 Aug 2025 23:01:58 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: IeuLtWZvGgfUFGIT4To7rpPlp5Rx4agXYexILvbl0DA=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:76:ad:71:3e:c9:af:ab:12:ba:ee:32:6b:9d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Aug 22 23:01:58 2025 GMT
Not After : Aug 23 23:01:58 2025 GMT
Subject: CN=4513b8f8c2a5ed375979d2c037ac16362c824a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:34:41:03:88:fc:0a:9c:9e:43:a8:b1:c7:
57:77:c4:5b:ce:5b:ae:dd:6a:2d:55:69:15:bc:e5:
4e:87:65:59:06:ae:be:12:e7:36:f7:a6:76:0c:56:
e1:89:6a:30:09:aa:f9:6c:8e:37:fe:8b:61:fe:21:
dd:b8:8a:78:ef:3a:4b:e8:d6:3b:77:1e:a6:c7:4d:
fd:58:fb:33:fe:6d:51:06:81:a9:68:b6:5e:da:b0:
4b:5e:54:71:a3:19:8d:cf:a9:96:c1:ce:6f:57:25:
e9:6b:fe:60:84:9a:ae:f9:70:e3:21:d0:ad:b0:bf:
c5:77:45:f9:9d:b6:2d:35:f9:e2:ac:57:df:b8:3f:
4a:bb:78:19:76:08:c4:36:49:ec:40:fa:09:91:55:
30:3a:eb:70:64:86:83:b3:0e:97:56:3f:26:04:e6:
39:3f:6a:56:f2:d9:77:52:f8:93:5c:e1:d2:77:f3:
6e:2f:d8:6c:3e:ae:a9:b6:6b:cd:65:84:ff:28:aa:
55:70:6a:c0:ab:14:94:33:08:b9:60:a3:92:a9:4a:
4f:d2:fa:ce:4e:10:98:13:d2:c9:43:74:05:b4:38:
d4:a6:f0:4d:a8:68:09:d8:0e:ea:7b:f0:30:ee:8e:
83:7b:4c:d6:08:83:ad:15:6b:1e:ee:ed:90:29:1d:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:B8:F8:C2:A5:ED:37:59:79:D2:C0:37:AC:16:36:2C:82:4A:98
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:41:28:1e:30:79:23:f0:93:bd:ba:13:4c:d2:be:22:43:7b:
27:61:26:a2:31:aa:96:ab:01:75:83:d8:dd:90:bd:d9:c1:b1:
cf:f6:9c:69:09:2f:3e:9c:4f:df:d6:d7:5a:90:f1:c2:6b:f8:
40:3a:ba:f5:43:d5:92:b1:1a:a3:3b:89:e4:72:02:b5:d4:65:
53:ea:43:fa:98:e3:d9:d5:c7:07:f2:5a:35:5b:de:7d:f3:05:
92:61:74:d2:4e:cd:2c:a0:51:6b:49:22:0b:0e:43:4e:d8:47:
74:74:58:83:97:72:f1:96:aa:98:3a:54:99:36:79:58:14:27:
b3:d6:fb:36:85:db:7a:1d:52:9b:ea:4a:b9:ca:91:28:f0:6e:
a4:36:2f:4c:ca:e2:40:c0:ee:63:53:a7:44:a5:58:fb:a3:d4:
dd:69:c0:76:2e:9f:f6:d5:e1:69:c8:e2:8f:13:21:af:04:9c:
60:f9:cb:f1:d8:d1:ec:4f:2f:75:5e:55:db:2c:47:fb:1b:7f:
18:53:fe:4f:4b:44:76:eb:4b:44:d3:e9:1a:38:5f:93:70:e2:
fa:94:ee:8e:d8:7c:f1:a0:82:a0:8f:56:17:2f:ab:ac:b7:45:
40:7d:d5:4c:8c:7b:90:c0:83:99:ff:15:2a:5a:e2:12:01:e4:
96:90:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:56 2025 by rpki-client