Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: QRzmrJiip3GbsrePbAGiMeoy0VY/Ufk8/mo193Gxa7k=
Subject key identifier: 60:8E:F8:E0:F4:CE:C0:87:BD:BC:E7:23:09:DA:4B:8A:6B:3B:01:83
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 0198D4E02C0903A15EE616628C2B5301FDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0CC7
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: Kwxr6UOwBe4iAEXc1Dlbt/31Q+KAdc8rTH+nHnxGtXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2c:09:03:a1:5e:e6:16:62:8c:2b:53:01:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=608ef8e0f4cec087bdbce72309da4b8a6b3b0183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:fe:08:1d:75:8b:95:d4:25:63:d5:09:49:
f8:fd:8f:8c:85:8f:b5:f7:43:a8:4f:72:00:f8:41:
e9:12:ff:be:61:b1:93:08:70:5c:db:42:9a:4e:87:
e0:ba:dd:13:0c:ff:fb:37:2d:a0:26:20:d1:f4:3b:
e9:1c:d5:4c:bf:bb:a0:3e:3e:50:49:4f:a3:b7:e2:
33:53:f7:86:00:8c:31:b1:2d:38:73:db:68:30:c4:
10:89:e8:74:84:7c:e1:76:70:2c:0e:18:66:5e:66:
d1:8e:ea:34:25:14:cc:64:5b:36:ef:48:2e:4c:0a:
1f:8b:14:c4:2f:a7:61:99:e9:de:c5:8a:73:9c:9a:
e2:06:ad:40:39:a7:7f:d1:3f:de:ba:ab:93:2f:d2:
71:fe:85:b0:8e:9a:67:3d:47:e0:79:f6:58:45:61:
ec:6b:d6:67:f3:25:ed:fa:21:96:9c:57:0a:7d:34:
6c:ce:c3:f5:03:b0:b1:ab:95:d7:84:8e:96:59:bc:
0c:39:32:19:34:44:4e:ea:0a:ea:a6:ab:bd:21:4c:
ed:7d:33:f6:8e:22:d4:fb:44:79:b8:2c:60:db:15:
ea:68:60:93:46:87:f2:f0:d8:ef:1e:82:e6:29:9c:
e5:dd:68:8e:6b:42:ae:2c:f0:8e:0c:74:d2:c5:2a:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:F8:E0:F4:CE:C0:87:BD:BC:E7:23:09:DA:4B:8A:6B:3B:01:83
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2c:61:2b:88:ed:40:7e:f7:fc:62:e3:c2:67:c8:36:7e:82:
72:b2:04:54:18:a0:91:b7:4f:66:e0:52:26:2f:3d:e2:cc:68:
8f:19:95:1d:6b:a0:8f:8b:d9:df:5c:71:46:14:07:26:5a:c1:
3b:35:52:1d:96:ba:88:69:72:a4:27:06:07:8b:e5:de:ea:bb:
65:e1:7f:5f:8d:b6:af:88:2a:6a:c6:9a:73:06:e3:8c:8e:00:
2a:9c:36:88:85:40:cd:66:70:fd:56:39:91:27:8f:f5:9c:5e:
60:72:ba:12:14:b5:02:7e:f2:d8:9e:52:e1:02:d2:93:a3:7f:
2e:a8:38:13:49:ca:77:66:38:da:26:d4:8a:36:c7:b2:5f:19:
52:23:d3:b0:6e:7d:7d:0f:18:15:5a:50:05:04:d0:e9:67:5c:
ec:ba:f1:86:2d:7c:eb:52:54:cd:62:11:36:e0:cf:ad:75:c0:
d4:a6:67:0e:a5:f9:ca:3a:d0:f0:5d:d8:3e:ec:b9:23:c7:14:
bf:35:84:44:c5:4b:44:88:c8:c2:bd:8f:a5:4d:08:40:07:8a:
67:b6:9b:08:d1:04:a3:4c:55:3d:96:41:f9:09:4e:80:bf:12:
7e:68:74:92:17:e2:64:fc:38:1a:e3:2b:1d:8a:93:c2:3a:7e:
3e:6a:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:19 2025 by rpki-client