Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: cGCXCDxUQvXMEk5yblZa2NSGnBL6HV4i+74nuyOBaq4=
Subject key identifier: F5:A2:EE:22:D2:84:4C:A0:38:14:3D:E6:E1:BA:AE:B6:DC:12:8F:BA
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 0198D5836BF1DE387F84CB6B60C0EF6DD2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0D3D
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: 4vahZMeIphBKjwhoLTs/5QrGitf0hgaCbwDsAubd7TE=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6b:f1:de:38:7f:84:cb:6b:60:c0:ef:6d:d2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=f5a2ee22d2844ca038143de6e1baaeb6dc128fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:8b:54:39:58:af:e7:ac:91:42:53:32:8a:
f4:17:8a:22:4d:99:c4:6b:29:c1:53:0f:47:6d:3f:
1d:06:f5:49:80:64:ff:b8:31:9d:6e:61:11:6e:6b:
e9:53:f0:18:4c:07:ae:c1:19:61:54:43:3d:26:fd:
58:61:5a:0f:3b:db:65:06:0b:ac:fc:de:3b:f4:88:
65:cc:6d:03:24:8f:f8:12:9c:b4:6d:e8:46:23:85:
2a:1a:88:b3:e0:75:a2:96:58:f0:04:4f:ba:04:8e:
b3:17:3e:b8:c4:b3:26:4c:92:e6:22:cc:a2:67:d8:
39:e9:2f:67:c6:03:0d:b9:a8:46:0b:78:6e:49:e7:
d0:26:f0:35:13:a9:1e:ff:5b:f0:69:d1:c3:36:31:
10:21:24:28:b5:1f:f5:59:ca:4f:df:2f:ed:d2:84:
6e:3c:a2:03:49:37:33:d0:dd:1b:12:eb:4c:75:81:
67:54:45:04:dc:fb:f6:9b:de:16:89:b6:f2:02:70:
9e:19:7c:d2:4e:28:ff:ec:a1:f9:f7:57:63:95:d8:
3a:95:ab:dc:af:e8:b5:ea:79:a4:30:14:a1:58:88:
a9:51:d0:3d:3d:b4:3e:69:fe:3e:20:2e:b0:9a:17:
a7:6a:6b:7c:39:fe:39:6e:ba:62:2c:21:23:4b:70:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:EE:22:D2:84:4C:A0:38:14:3D:E6:E1:BA:AE:B6:DC:12:8F:BA
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:9b:b4:f3:f1:5a:49:03:d6:8a:ac:9b:e5:e6:5d:c7:61:
29:84:40:cc:98:d7:a6:48:b4:e2:8c:f0:09:32:40:61:89:6a:
44:40:47:1f:53:05:a9:d6:4d:f2:52:c8:73:9b:b3:4f:83:6a:
dd:b0:fc:a5:95:f3:42:7b:3f:a1:02:4a:56:7e:07:33:99:8b:
de:e7:e1:d7:06:ba:51:5f:be:cd:1a:23:aa:a6:22:3a:78:85:
1e:0d:58:b9:91:d0:53:c6:51:11:55:eb:c7:fd:73:d5:f0:76:
89:80:46:ac:a3:18:8b:7d:c0:b0:fa:72:21:07:c0:96:44:22:
f1:5c:93:86:82:e8:fc:ad:b5:65:e3:90:c0:63:06:cb:4c:9b:
9b:39:aa:a8:fc:18:8e:f1:b7:03:6a:3b:a7:9d:a7:a3:df:c8:
bd:5b:af:8e:35:1b:c1:c2:d7:c1:a4:af:62:cc:21:9c:ea:13:
10:03:a8:b1:cc:88:6e:29:ca:13:5d:4d:06:87:e1:23:5e:43:
2d:02:67:2e:aa:d9:4b:19:fd:93:33:4c:03:35:69:4f:56:f7:
48:e4:7a:6c:57:09:9c:9d:23:fb:ba:02:95:1e:8f:55:ef:b6:
5e:16:d6:7f:e7:d5:a5:10:ab:48:35:f6:7a:23:a4:38:45:53:
7e:9c:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:29 2025 by rpki-client