Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: 6Il/JXIGsriUcsh7iWOJOCA2LJPrJGR+H6UO/WybT90=
Subject key identifier: 2C:08:E9:54:69:58:FB:7D:A6:8B:5D:09:49:33:B3:D3:0B:AF:FC:8B
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019847E4A0114BB24F13F66EFEE8B2815227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0DEF
Signing time: Sat 26 Jul 2025 18:00:22 +0000
Manifest this update: Sat 26 Jul 2025 18:00:22 +0000
Manifest next update: Sun 27 Jul 2025 18:00:22 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: MYjIIcHL8dKGZjOBYSx2hB1ALPHRyInRMbXGjyEzeak=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:a0:11:4b:b2:4f:13:f6:6e:fe:e8:b2:81:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jul 26 18:00:22 2025 GMT
Not After : Jul 27 18:00:22 2025 GMT
Subject: CN=2c08e9546958fb7da68b5d094933b3d30baffc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:b2:1f:db:dd:46:2e:19:64:db:18:19:76:
af:f9:d1:a7:c8:31:d7:82:51:54:0c:83:76:09:c9:
1f:5e:92:5f:6b:65:c8:1b:e2:84:fa:8d:b0:8a:f1:
4b:f8:73:7c:57:8b:ee:1a:e4:68:2b:6c:6e:aa:d1:
b1:d7:34:77:ec:24:7e:49:b4:2b:79:ad:96:18:63:
4a:e6:85:72:4e:52:01:d9:3a:7a:94:9b:71:8b:fa:
86:c3:ce:97:65:70:4f:7b:1b:fa:8f:c8:83:8e:78:
cd:be:83:0a:17:24:e8:1d:fe:47:2f:e9:0a:23:d1:
0c:a9:9b:a4:c7:2e:8f:47:3c:9a:b7:8d:7b:9f:89:
f7:0b:6f:5c:37:ec:f8:3d:5a:da:95:b9:32:34:07:
fc:dc:b3:8b:1d:6c:fb:61:6a:15:ce:a5:51:8d:90:
99:5d:e6:bb:ef:a4:8a:f7:65:ba:fc:f0:b3:51:df:
7a:8d:7e:a6:59:13:9e:58:0f:ee:33:fa:95:d2:c9:
fb:82:e3:18:60:8c:f5:d8:1e:03:a8:b9:aa:ab:1f:
55:04:3d:68:a2:93:93:e6:ac:d2:9d:7e:a9:6e:ab:
76:53:1b:31:30:34:da:bb:59:c5:5d:18:8e:d6:2b:
c2:79:ca:cc:32:13:42:7b:22:e0:86:ae:84:f8:e2:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:E9:54:69:58:FB:7D:A6:8B:5D:09:49:33:B3:D3:0B:AF:FC:8B
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f2:b7:a0:18:e9:46:54:fe:24:a5:c5:af:c7:70:ed:1b:3c:
d8:20:93:2e:a5:1e:69:f9:8e:29:ad:21:bc:50:fa:b6:35:fd:
23:27:c7:ae:47:aa:9c:f6:f1:6a:9d:a7:74:7c:e0:f3:32:3a:
9c:2a:96:e6:e4:e4:1f:e1:ca:9f:0f:c4:cf:fb:01:ac:ae:23:
95:9e:ff:e9:27:ce:f6:7b:65:fc:a7:6e:f2:5c:93:4d:dd:db:
51:7a:4f:64:15:ce:63:44:3c:23:7a:e2:df:84:24:9c:b3:66:
b3:1f:03:03:bf:c5:cf:82:56:aa:90:df:47:6a:8c:12:20:98:
07:0f:07:30:fa:f3:13:13:d7:e9:e8:e7:27:5a:b7:07:89:ad:
f1:a8:0d:ac:e7:6a:22:5e:80:37:6e:a7:b8:57:40:c0:77:00:
fc:91:9a:07:39:92:0f:7c:b5:e5:0d:54:cc:5f:f1:38:d7:75:
de:91:fd:54:9e:55:a3:02:2b:ab:27:89:86:f9:56:0a:b3:d8:
23:b4:8e:9d:80:5c:24:e1:aa:46:17:61:19:34:6b:b8:65:4e:
8e:5b:c2:ba:0b:15:f8:8b:93:c0:fd:45:07:d8:16:ec:29:ed:
e0:52:71:1d:a5:7e:bd:c6:c5:fb:60:28:f2:4f:26:2f:88:e1:
73:ea:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:40:44 2025 by rpki-client