Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: Khw285+D/EIqv/VWO5zREzfpxKql01gMhJ2O6kgjRQA=
Subject key identifier: 33:5F:49:36:D7:20:48:2F:C9:F8:8D:CE:DB:E7:DC:4E:90:C1:C5:70
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 0198D4A80315370A2A74BE3E1977F20A7E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 02:00:37 +0000
Manifest this update: Sat 23 Aug 2025 02:00:37 +0000
Manifest next update: Sun 24 Aug 2025 02:00:37 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: 4sDrEcIjl0tPoAq4CFDmLR2PHeboXFSggu4kOIyRTWA=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:03:15:37:0a:2a:74:be:3e:19:77:f2:0a:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Aug 23 02:00:37 2025 GMT
Not After : Aug 24 02:00:37 2025 GMT
Subject: CN=335f4936d720482fc9f88dcedbe7dc4e90c1c570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:6b:ce:ea:54:8e:c8:45:66:60:e8:96:4f:
02:26:ab:6d:37:7b:07:d7:38:9e:d2:34:66:95:f4:
d5:95:94:7d:56:96:42:b1:d3:7b:df:9f:25:ea:a1:
e4:49:98:c0:7b:96:73:4b:80:4a:91:60:c9:06:d6:
29:4c:fa:94:46:86:e2:38:7d:8f:fc:c6:97:24:d5:
7e:db:e9:51:2c:d0:6c:b8:50:ff:56:ab:a8:b8:04:
16:92:8f:43:c9:69:ef:a1:06:d4:d6:b9:13:3a:76:
d2:f8:15:ea:a0:55:8f:c3:8e:29:5b:3b:c7:d0:33:
ee:b6:47:25:6e:50:89:fa:85:c8:c1:a1:43:9c:a7:
2d:d4:98:50:bf:8c:69:97:b0:9c:4e:9c:0f:b3:48:
87:90:8a:e1:69:e5:44:84:71:96:40:61:62:c8:da:
3b:d0:37:b3:25:ea:83:89:d7:62:aa:32:53:cc:0e:
09:d5:5d:bb:7d:87:b9:5d:d0:bc:ee:41:86:99:bc:
fd:09:2f:cf:23:b8:28:c4:1f:63:e8:d1:57:c2:ca:
56:83:cd:32:48:56:dc:81:1a:5f:2a:d5:d6:af:c4:
fb:fc:17:be:99:9e:02:0f:ee:4e:85:48:eb:39:ec:
2a:7a:51:4d:07:fe:f4:5b:b2:54:1f:3c:72:0c:42:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:49:36:D7:20:48:2F:C9:F8:8D:CE:DB:E7:DC:4E:90:C1:C5:70
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:78:a4:69:c4:f0:1d:6e:4b:d2:77:91:c8:77:6f:04:ad:eb:
38:ca:25:5d:3b:b4:5a:0c:98:99:9a:0e:b0:88:0f:35:2c:5c:
2d:cf:b6:9c:4c:4b:f4:d5:fe:09:da:82:85:17:e3:fe:1d:97:
2c:94:d0:b1:4e:ae:73:4e:fb:1f:f2:0f:c3:0b:b3:44:75:33:
e9:a3:78:dc:60:dc:0c:76:fc:69:68:be:8f:db:dc:30:a2:42:
89:6a:4f:28:e0:a1:93:a4:35:53:c2:57:b8:51:47:4d:0b:bb:
5c:31:d4:65:0b:3c:2c:ac:22:30:d7:1f:cc:d5:09:ed:50:96:
7f:c3:56:7d:b0:46:1a:9e:34:79:a0:eb:b3:b3:6f:28:f4:e1:
f2:fe:e7:e4:e8:0d:4c:9c:d8:fd:0f:a7:04:7f:d2:b0:d4:af:
4d:38:5b:e4:06:14:b5:f2:6d:e7:a5:fa:94:f5:15:2c:67:79:
11:8f:73:ba:0f:e9:dc:8e:53:42:c6:03:0a:6e:cf:0f:8b:eb:
67:79:ce:eb:6c:d7:f8:65:e7:c3:5c:56:95:4e:31:c3:bb:71:
97:6b:46:45:ea:28:94:0d:e3:ea:45:22:7f:27:e9:b2:00:ee:
3a:4b:15:8c:85:9f:15:3a:ba:9d:39:87:fa:1b:df:05:cc:b9:
f7:48:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:00 2025 by rpki-client