Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: KV/MTHYGDmPuMqitacNuCyPMeOMH71L+DKutTmZBhNE=
Subject key identifier: 10:73:C9:37:7A:17:74:2A:83:C9:35:20:57:BA:2F:4F:C7:6B:59:CE
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0198D5BC4D0F46A59B78D860BF77AC98C4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 069A
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: hGbTVRQpSTF1tCWgkkVfr0A09cdo2e0IoaHOYgc6Tfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4d:0f:46:a5:9b:78:d8:60:bf:77:ac:98:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=1073c9377a17742a83c9352057ba2f4fc76b59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:65:1e:e1:3c:34:ba:91:9c:2f:bc:d4:72:
64:b8:c2:a2:ac:6b:30:7f:44:58:5d:05:bb:ea:e9:
b2:f4:22:71:3f:96:65:47:d1:64:f9:93:ad:c2:43:
e6:43:12:be:c0:2d:03:7e:40:7f:71:2a:eb:63:6b:
05:e0:ae:b9:6a:3a:ef:69:12:7e:3c:ae:81:06:08:
f9:56:d9:0b:42:17:40:ff:c7:73:5b:c3:4c:d4:e1:
08:74:d7:4b:89:c8:13:5e:d0:92:4e:cf:e5:0d:9b:
7d:6b:0d:d1:d5:23:4d:8c:d9:08:a3:f1:c5:03:fc:
b1:a8:74:09:6d:8f:dc:c8:02:2e:dd:c3:9b:5d:a7:
73:3e:60:db:6c:30:6f:8a:e9:08:4f:ae:43:a3:82:
26:17:28:3d:31:1e:e2:60:75:80:3b:23:3c:ed:d0:
bc:1f:43:c4:bf:f3:77:dc:ad:29:7b:c0:a6:f8:d4:
f7:3b:c1:c5:74:fb:6b:36:56:a3:a9:11:44:d4:9f:
0e:2b:76:7a:f4:e2:85:0e:66:43:be:ad:a6:53:0d:
db:2b:c4:a4:ff:65:8e:3b:49:cc:c2:e3:0b:be:53:
ff:68:9d:72:af:9e:70:5d:bc:f3:64:38:99:3e:24:
bf:f9:d7:8d:a2:65:af:d3:57:3b:3a:13:3d:ef:0e:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:C9:37:7A:17:74:2A:83:C9:35:20:57:BA:2F:4F:C7:6B:59:CE
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a1:88:57:7a:b4:88:1c:ce:ad:c8:13:f3:f4:97:88:5c:53:
40:aa:89:03:da:4c:4c:51:42:ab:7b:ea:e8:25:d1:b8:40:0b:
cb:f9:df:57:96:3e:fd:93:92:4f:8e:48:bb:45:db:d0:97:f6:
a1:aa:d4:1f:31:69:2d:ae:22:24:ba:55:ea:74:1b:ee:4d:49:
e4:89:21:71:3e:b3:d8:ab:55:f5:41:75:1b:74:59:fc:4d:f3:
f4:84:33:2d:5e:d8:c2:d7:a7:f4:77:b7:24:36:d5:a9:6e:d1:
b5:2a:2e:02:21:51:a1:9b:d4:2c:d5:08:2a:33:be:8c:cc:6f:
03:71:7e:94:93:26:1a:12:01:62:7c:af:a2:fc:6c:32:46:01:
e2:a7:0c:9c:2e:30:6e:1d:31:ff:79:39:de:68:28:70:44:4a:
20:00:70:b8:64:84:8b:50:06:b5:3f:6a:64:75:e3:73:22:00:
a1:29:57:1f:61:d7:f6:73:69:d5:99:52:21:60:9e:18:56:ec:
7f:76:1d:37:95:35:db:51:d3:09:dc:7d:bf:5d:ef:fd:d7:0f:
c2:ae:38:0d:8d:5b:47:2b:f3:6c:b1:ea:e8:09:f0:8f:7a:4d:
fe:45:36:ca:18:59:24:db:24:b5:cc:14:79:e9:0b:9c:f1:9d:
d2:66:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:09 2025 by rpki-client