Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: Bxq9By0aRDIeIIGQOT7jUMcMymsHVF9m6EJoyn05kBA=
Subject key identifier: A1:16:0A:59:85:33:36:70:3E:FF:50:E7:2C:09:35:0E:FE:9E:29:87
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 0198D4A812625F21750A3F17DE1D2CDC70DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: ph3SL9/4oNI6RpJNJYQsjjn6yC+YY5B2k3tEn/hcQOw=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:12:62:5f:21:75:0a:3f:17:de:1d:2c:dc:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=a1160a59853336703eff50e72c09350efe9e2987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:61:20:f8:a0:79:0a:b7:7d:ca:a9:f3:c1:
36:14:d9:79:3c:01:41:8c:d1:25:10:27:8d:58:1e:
9f:ca:23:0c:66:dd:f2:e6:8d:28:7b:51:2b:06:83:
33:8c:4d:d9:f5:a1:ad:78:fa:05:e4:4e:6a:4d:45:
2a:bf:00:80:56:9d:1d:6c:f2:43:11:00:ca:bc:92:
39:ba:7d:87:3a:8b:34:24:98:9d:85:91:da:4a:19:
c8:cf:a6:b9:e9:70:dc:7d:3b:0b:ad:a1:e3:15:de:
2a:e4:5f:a0:0b:d3:96:99:1b:49:83:c1:bb:9d:7b:
08:3e:5a:1b:f1:90:d6:08:19:32:14:bc:ac:d5:04:
02:20:20:b6:be:7d:62:b1:62:c9:4b:4d:43:7f:48:
3c:17:a4:2b:22:59:45:d3:f9:26:1d:3c:15:8f:a4:
31:55:63:8e:1a:15:2b:48:85:eb:76:66:3f:28:46:
4a:6a:27:a4:de:e9:93:e8:9c:b4:b6:09:78:d1:09:
9a:73:a4:26:cf:c8:fb:55:6a:25:02:76:57:18:2e:
7c:d2:b0:10:af:b7:ef:d5:a4:65:3e:36:4a:3e:f5:
cf:16:bf:87:81:10:31:db:5b:da:22:86:59:f1:56:
2b:7a:3c:77:7f:59:bb:e2:c8:61:20:2d:96:a6:05:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:0A:59:85:33:36:70:3E:FF:50:E7:2C:09:35:0E:FE:9E:29:87
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:95:e4:5f:46:21:04:fe:13:2e:77:dd:89:1f:85:4a:d1:
eb:73:ba:27:cd:1a:34:1c:f8:a9:05:ce:bb:58:71:30:48:8c:
6c:cb:d9:1c:fa:4b:1b:62:4a:75:f0:86:a0:76:b8:46:c7:64:
7d:d7:d5:df:32:0c:cb:87:0d:92:3b:04:e9:20:b9:06:58:9a:
d6:b1:34:1a:e5:66:79:5a:b6:44:ff:f2:ec:33:ae:2f:a1:d4:
42:72:86:57:02:08:2b:2b:83:8d:7e:53:05:bf:8a:a8:e4:50:
8e:9c:0b:e9:16:da:bf:3c:e6:54:a0:68:66:89:7c:37:4a:5d:
c7:dd:bc:01:fe:f9:ec:45:66:2b:09:3c:c1:0c:3f:80:2a:ae:
ff:98:ae:3b:8f:48:90:cd:12:9b:1a:99:5a:ef:dc:92:1d:28:
70:c1:36:a6:ad:73:29:2a:53:98:c4:b6:d6:b7:b4:84:c3:91:
ff:d5:48:e6:b9:21:65:7c:3d:56:cd:ef:46:13:72:9a:75:b6:
a6:83:3e:2b:de:c8:6d:5a:56:61:be:37:bc:0d:be:64:69:80:
46:b7:be:9f:a4:b1:36:92:d6:57:0d:27:93:d3:b9:a3:86:00:
a2:5e:53:e7:e0:1e:9a:7d:cb:21:65:82:7b:19:cb:e5:c2:1f:
6e:97:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:32 2025 by rpki-client