Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: BuJw2AR0wPpHA47grr34pI9vAajs92aKqkXbcE6lOQQ=
Subject key identifier: 60:E9:88:DD:FC:7C:C0:47:FE:E6:8E:B9:D7:5E:54:CA:92:31:CB:31
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 0198D660A8867E98B866C65748A385BFA1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 02FA
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: in49yzJ2ZzzgSe/baARUJEsTSlhtR0oU/dvGEW5DgQQ=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a8:86:7e:98:b8:66:c6:57:48:a3:85:bf:a1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=60e988ddfc7cc047fee68eb9d75e54ca9231cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:04:86:98:52:c2:e2:84:7c:08:d4:c7:a6:
77:91:99:9e:48:1d:19:45:93:8b:4c:24:05:dc:88:
cb:93:50:ac:b5:42:75:8e:1f:f6:b8:41:06:9d:7b:
64:e8:8a:72:ad:02:92:77:87:b6:ce:a7:6f:b7:12:
a9:20:f7:9c:2c:21:f9:64:bd:02:d1:7e:68:19:6a:
4a:de:f9:50:fc:5d:d8:c1:2b:f1:0b:25:cd:81:c2:
ab:4c:c7:68:4b:3f:52:ed:e6:ed:1d:8b:3a:29:66:
8b:2a:7e:37:f9:55:f2:5b:03:c5:ff:ad:32:50:02:
26:4c:07:dc:df:e6:49:78:fa:bc:38:cf:90:49:d1:
07:53:31:1e:00:e2:55:33:74:77:3f:a9:48:b5:09:
40:70:2b:c0:da:c7:e8:02:c5:37:a4:95:0a:cb:b2:
4d:f7:07:2b:4e:29:57:22:45:ac:c9:fe:e1:d0:41:
7a:8f:6c:8e:ea:ae:59:ee:56:e3:4b:4c:0a:35:f3:
e9:4d:b7:2e:8a:71:70:61:94:5f:16:3d:ad:26:68:
8d:32:5d:e5:d8:09:cd:4f:e2:5e:6b:ac:11:52:44:
01:3a:e7:7a:bd:f3:42:cc:97:b1:3f:f2:a4:a4:9a:
8a:38:7f:62:00:c1:52:2b:c8:a5:27:c7:6c:6b:7b:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:88:DD:FC:7C:C0:47:FE:E6:8E:B9:D7:5E:54:CA:92:31:CB:31
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:04:b4:a9:5b:d3:63:ae:d6:f1:cc:2a:9c:b7:96:8f:51:6f:
e8:9a:07:09:f9:13:45:c0:90:e5:e3:47:dd:86:75:cb:95:14:
57:4f:d2:d7:0a:6a:8f:8a:ed:b8:4f:13:db:49:cc:90:79:8f:
cb:d9:1d:25:e4:ce:b5:49:91:17:67:0c:19:6b:cd:8a:2e:17:
49:f9:48:d2:7e:b6:d1:fd:4a:2c:66:21:ee:54:fb:36:28:77:
6f:4f:a0:1c:a2:d3:05:33:8c:eb:37:2d:e0:79:9c:f3:ae:f2:
35:3a:ca:04:ed:7b:ad:a0:54:5d:9c:99:7f:da:1a:94:5f:9e:
d7:4d:9d:8a:73:d3:25:f4:23:de:b8:fb:86:6f:0b:e7:15:b5:
12:03:3d:63:e9:63:07:2e:b0:4c:9a:b6:da:01:fd:ce:de:0f:
6b:69:59:9f:47:aa:7c:3a:2f:05:d2:09:40:27:d9:2b:45:68:
9d:27:ee:8d:51:da:42:85:50:1c:17:f5:00:2f:27:d9:7b:d1:
4f:b1:5f:b5:ce:6e:7a:39:79:2d:eb:4f:25:a7:21:88:5c:e7:
3a:10:2d:01:4d:a1:78:2d:70:3f:91:ec:b1:5b:bf:b8:16:67:
c1:5a:0d:ad:4c:26:9f:3b:53:e1:33:f5:39:9d:e5:e6:f4:d7:
34:b7:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:53 2025 by rpki-client