Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: cna9/1WDg6+yS+hS1S7F2Q9egqfMYyiOYXb4aCDX0z0=
Subject key identifier: 09:F0:BE:DA:B0:95:8F:CE:31:F7:D7:EC:44:C3:89:7E:77:4D:50:B3
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 0198D66030CBE6AED53576FC20F411847282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1350
Signing time: Sat 23 Aug 2025 10:01:24 +0000
Manifest this update: Sat 23 Aug 2025 10:01:24 +0000
Manifest next update: Sun 24 Aug 2025 10:01:24 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: RDQpYHpD/K29m+V3RI/vixueP6y99ZB3RB9wwxaomI8=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:30:cb:e6:ae:d5:35:76:fc:20:f4:11:84:72:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Aug 23 10:01:24 2025 GMT
Not After : Aug 24 10:01:24 2025 GMT
Subject: CN=09f0bedab0958fce31f7d7ec44c3897e774d50b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:ec:a3:ea:67:19:58:b6:e5:97:3d:3b:a0:
8e:d7:6f:ff:90:6c:25:fb:ca:69:1d:12:44:58:8c:
2f:43:7e:d8:0b:1b:2f:ff:9f:ba:ee:dd:25:10:fa:
4b:35:cf:6e:ee:49:ad:8f:e8:85:d2:3e:14:a9:7d:
25:fe:b3:58:69:ab:8b:24:fb:b0:0d:33:d9:8e:86:
57:a7:f2:24:e8:b7:f4:71:ab:da:43:f0:ce:de:71:
b6:f0:89:ae:b3:3b:cb:53:3f:f8:e2:f8:5e:d4:9d:
5b:77:9a:ce:16:a5:42:e8:36:28:be:ae:00:c9:87:
0e:7c:f2:fc:a7:ee:dc:51:31:b6:40:5b:41:be:ad:
81:2f:98:ad:b3:01:ab:12:6a:6d:a8:37:fb:47:86:
1d:ff:a8:c3:f4:af:b2:05:01:e8:3e:28:90:db:bf:
4d:cd:dd:aa:87:98:62:8b:42:d7:f8:09:08:75:9d:
02:e7:65:2c:3f:c9:8e:fc:62:83:4c:c6:8d:ca:41:
7e:8f:81:6d:a7:fd:56:bc:72:77:38:61:c7:38:3f:
e7:87:7c:d4:2a:b0:b6:1a:09:76:49:f7:a5:21:83:
ff:ab:cd:cf:21:61:dc:43:a6:98:27:0c:e6:8c:e0:
b0:9b:55:75:de:26:f8:da:04:44:b9:a8:30:9c:82:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:BE:DA:B0:95:8F:CE:31:F7:D7:EC:44:C3:89:7E:77:4D:50:B3
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:a0:ad:c8:88:6c:3d:4a:a1:83:27:cc:45:fd:b9:97:3f:
06:f2:7a:f9:bb:ff:81:fe:3c:36:13:9e:4e:62:27:94:f7:79:
42:62:63:a9:02:35:43:0b:1f:ec:69:86:a3:e4:83:75:73:1d:
7a:00:38:e7:d2:18:0c:aa:07:c0:ce:1a:d3:3b:4a:20:a1:84:
37:0f:88:55:a0:49:e3:97:67:8c:de:4a:cc:be:9e:b4:e8:98:
48:23:de:e4:08:80:d9:05:f9:82:4c:96:4f:22:a5:ce:6f:08:
ec:a1:9c:15:b9:a1:7f:81:c4:72:97:92:ca:02:18:80:c3:64:
6d:df:d4:77:79:11:e7:9e:2a:01:be:4b:f8:2b:1f:30:5e:80:
ea:e9:68:9a:40:43:62:6d:d9:7a:07:f7:0c:4e:53:b7:0b:e8:
f4:c4:a9:45:9f:c6:69:63:06:f6:8c:01:14:4d:bf:b5:66:a9:
0e:09:f5:5e:3f:27:bf:6f:89:4b:47:0f:9c:5e:03:6d:0d:fe:
1e:90:3c:c4:fd:eb:cb:6f:ec:39:75:ba:8e:e1:63:9b:55:cb:
52:9b:15:99:83:71:0d:5c:bc:dd:3b:93:c9:8a:2d:53:18:f7:
50:93:08:42:75:79:38:a7:0c:97:25:ce:14:08:bf:4a:13:cb:
f8:f1:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:04 2025 by rpki-client