Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: njc4DnWrfVCPMfCEqKwfhCnARnmd3qf+5bAkSWSkREM=
Subject key identifier: C6:45:67:13:93:17:39:49:D6:C8:6F:21:72:51:D3:41:AC:5E:D3:AB
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019950099BC8EB0A36D8019F6B60CFFCB27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 08AA
Signing time: Tue 16 Sep 2025 01:00:30 +0000
Manifest this update: Tue 16 Sep 2025 01:00:30 +0000
Manifest next update: Wed 17 Sep 2025 01:00:30 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: cOiDQYhF04BANAtreOh9iLgMn4Z/vFva2m9NhOjnWxQ=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:09:9b:c8:eb:0a:36:d8:01:9f:6b:60:cf:fc:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Sep 16 01:00:30 2025 GMT
Not After : Sep 17 01:00:30 2025 GMT
Subject: CN=c645671393173949d6c86f217251d341ac5ed3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:80:58:a2:2e:f0:e2:67:70:1f:f3:0c:97:
ef:7a:d7:8c:85:90:5e:11:3a:e8:35:8f:24:1f:d0:
09:32:7f:8a:fc:81:db:59:4f:20:2e:8f:45:c6:10:
14:1a:6d:bc:71:16:2d:13:78:1f:59:42:47:e0:9e:
36:b3:42:93:73:d9:e3:d9:ca:ca:cb:ee:66:be:40:
78:66:42:d5:c3:c9:e2:31:df:aa:a0:32:da:01:b9:
4d:33:83:cb:78:50:5d:fe:d7:ad:b4:28:5c:5d:0b:
13:b9:a6:28:df:00:f5:5a:21:18:82:5c:cf:1b:14:
8d:75:42:8a:6f:79:23:f8:3c:f9:da:ad:14:10:59:
db:df:90:5a:4c:22:a5:2b:2f:27:d7:83:92:48:03:
14:e8:50:6f:6e:2f:31:d4:ed:45:03:f2:ef:bb:52:
cd:de:4c:8f:82:c2:12:57:7e:b8:7b:72:e2:37:07:
0c:1b:31:34:17:6b:eb:aa:5d:8c:26:6f:a1:5a:55:
bb:de:51:25:6e:e6:49:14:d6:89:7c:c8:13:d0:09:
fb:4c:33:ad:f7:67:f9:5c:02:a0:d4:e3:06:92:1d:
3a:eb:b6:fc:90:e4:eb:b3:18:1c:3e:ff:24:d6:98:
c5:f3:a1:ca:5e:a7:6d:cf:66:74:05:f8:87:a5:92:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:67:13:93:17:39:49:D6:C8:6F:21:72:51:D3:41:AC:5E:D3:AB
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:77:8e:8b:72:ee:c0:84:67:7e:d7:11:54:cf:a2:79:08:
55:a5:b9:a8:13:e6:98:16:46:28:da:d0:03:33:9f:2e:43:c4:
8e:60:58:92:7b:3f:b3:fa:c4:4b:46:39:92:fd:11:3a:1a:03:
91:e9:5b:85:a1:99:fd:fc:a9:d6:de:2d:8c:b5:59:d3:2c:65:
eb:51:d6:66:5b:fe:01:9e:f3:8d:ad:20:33:39:fd:8d:b7:71:
0a:17:27:a1:22:62:44:70:60:ce:14:b7:f5:37:f3:73:5d:2b:
56:51:0e:b4:34:0c:fe:9c:a1:08:4a:4d:a2:31:26:56:56:db:
cb:e5:33:3a:5f:ce:75:26:7d:10:a8:dd:6c:b9:1f:cf:91:ee:
1a:ec:4e:f6:ea:7f:f9:55:79:d8:20:7e:45:6e:04:28:14:3b:
aa:1a:3a:77:c0:43:ea:6e:7e:95:42:ec:b7:49:9b:cb:fc:3e:
e9:21:3a:df:f6:6b:c0:08:78:43:5d:01:84:d1:f3:5f:65:51:
19:34:0c:09:ce:86:16:1a:08:2d:d5:c8:80:88:c4:5d:63:2f:
44:f1:a9:a2:5b:09:46:22:8b:31:65:bb:5c:f2:a6:d1:be:f2:
6d:43:cf:15:9c:e2:21:c5:3c:f6:96:3e:b0:48:eb:66:b6:f4:
5b:00:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:40:58 2025 by rpki-client