Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: sBVY6jAC6W5EUi6ZfBom+tzE5AQwgzW6V+o8UF29CiU=
Subject key identifier: BF:CA:50:15:0F:01:78:D2:8D:E1:1D:18:D5:86:BB:69:EE:77:AA:3A
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 019855DF4698C2EF3FFEA3AD6483D79CB7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0C44
Signing time: Tue 29 Jul 2025 11:09:12 +0000
Manifest this update: Tue 29 Jul 2025 11:09:12 +0000
Manifest next update: Wed 30 Jul 2025 11:09:12 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: xQceaccKPU3haTJi8Z+vLuHdcQk2i1UH+pFeF6DztYM=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:46:98:c2:ef:3f:fe:a3:ad:64:83:d7:9c:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Jul 29 11:09:12 2025 GMT
Not After : Jul 30 11:09:12 2025 GMT
Subject: CN=bfca50150f0178d28de11d18d586bb69ee77aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:eb:44:10:06:56:28:6e:05:ab:1d:b5:97:
0a:a8:bd:94:3d:b5:d1:a6:a4:5b:e8:16:89:06:43:
76:0c:57:fc:82:68:c2:ff:9d:68:d3:bb:84:98:3a:
6b:aa:64:fa:32:bb:02:96:0c:f1:2f:b2:c6:46:7e:
3b:f8:51:96:07:0d:87:79:f3:95:8e:ae:79:01:c1:
0f:09:1c:a6:ee:38:62:7a:51:c8:32:cc:77:c1:93:
b6:b0:71:ab:13:79:ce:a5:21:66:b7:b8:9d:db:14:
c3:10:e5:f2:83:f9:20:4c:00:dc:3f:72:53:d3:3e:
88:7c:ff:2b:73:7a:42:9c:00:bf:bd:9f:01:6e:aa:
bb:33:9b:0a:69:73:1a:99:11:b1:91:f3:90:f9:2c:
d4:ba:0d:f8:c0:c6:74:84:d3:b6:5b:00:24:92:33:
f0:10:5b:03:ef:05:23:3d:ac:a1:bb:9d:73:70:99:
15:35:15:e1:d4:fe:dc:01:35:89:67:3f:89:65:e6:
0c:97:2e:41:af:8c:ea:f7:f1:90:8b:46:69:56:3e:
e9:9d:e9:cf:7d:78:1c:cc:e5:65:86:c7:02:c4:5d:
65:2a:20:3b:ea:cb:c3:04:84:f5:b1:88:8a:a6:01:
71:b2:0b:98:6b:08:61:22:37:a3:e9:b3:1e:44:97:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:50:15:0F:01:78:D2:8D:E1:1D:18:D5:86:BB:69:EE:77:AA:3A
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:5b:4d:19:09:4e:b9:29:32:6c:69:19:76:8e:65:7f:94:
ca:e2:a1:2c:76:5d:ba:ac:4d:e6:dd:94:a9:8f:28:40:00:fd:
55:c4:df:4a:f1:3b:f2:be:42:54:37:a8:e1:c1:ff:9d:5f:bb:
70:0d:e3:06:36:15:24:0f:a6:6c:c7:9e:77:99:a7:fc:86:85:
56:b3:bc:7c:5a:26:92:0c:72:99:26:08:eb:60:ab:c5:3c:b0:
bf:43:24:aa:1a:3e:7b:78:da:1c:7c:27:cb:94:56:f2:ea:72:
b2:bb:10:79:cf:53:2b:51:cc:31:9e:38:88:0b:96:47:d7:b9:
17:88:c7:b9:32:1b:4d:b4:6f:d7:4d:b3:81:1c:e4:e2:92:71:
eb:2e:89:51:4a:f6:85:c9:66:ef:1f:2f:81:10:65:00:23:76:
39:36:74:a5:41:72:af:a2:0c:e6:f4:7e:2f:32:d6:23:e4:8a:
ef:60:58:ea:e4:ab:89:2e:60:36:08:57:ad:0c:03:b0:1f:2b:
4b:be:21:7c:f4:6b:20:04:ca:b3:69:36:0b:c4:f5:03:92:3b:
44:47:73:b9:31:c0:4f:0b:4a:80:a0:87:f3:08:8d:91:99:1d:
68:90:9b:34:fd:29:a6:b3:ca:f2:3c:35:b1:0e:18:64:28:93:
12:8b:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:37:03 2025 by rpki-client