Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File: Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier: TBb4NAhzIuU9bAkAYg6p8TwjYFRTa0T6vZAx/6efIfM=
Subject key identifier: 09:38:7F:18:45:45:D0:A7:E7:2F:64:9E:08:C0:11:AF:16:5A:7A:C6
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 0198537AD81782D6C526776E97F6AF3A1991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number: 0CED
Signing time: Tue 29 Jul 2025 00:00:16 +0000
Manifest this update: Tue 29 Jul 2025 00:00:16 +0000
Manifest next update: Wed 30 Jul 2025 00:00:16 +0000
Files and hashes: 1: 5FA6usbApR1_cX5AgsEzHiEcMB4.roa (hash: 7OuczURaJl5BP/q53z8kXUiqcwX3Z4OY7NVnaBx1Pg0=)
2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: nvn0JRwP+PJIDra8p5Rw5kGXx2FUybf8CDcFdBw0cx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:d8:17:82:d6:c5:26:77:6e:97:f6:af:3a:19:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Jul 29 00:00:16 2025 GMT
Not After : Jul 30 00:00:16 2025 GMT
Subject: CN=09387f184545d0a7e72f649e08c011af165a7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:74:48:d0:70:0b:63:30:5c:21:94:54:5b:
8f:4a:37:43:7e:6d:39:9c:88:57:76:bf:0a:b0:5f:
39:9e:5e:38:db:9e:d9:f0:4a:77:32:85:8f:a6:59:
e0:2c:b3:46:68:53:bf:e1:63:d5:7e:14:52:c8:21:
a8:68:2a:84:8d:21:82:dd:95:5b:26:7a:2f:6c:8e:
c0:e7:97:10:b8:c4:91:e7:62:14:01:d6:d1:c3:04:
d2:e0:c6:ae:92:d3:05:22:7e:1b:2e:94:fe:45:6b:
cb:b0:53:9f:fd:27:1e:7c:00:57:9a:ad:c2:c6:ea:
3d:d1:84:ad:e4:87:e7:0b:40:d0:51:c8:13:d3:3c:
a2:98:4b:a0:80:fa:5e:16:09:23:65:ff:58:4c:a0:
de:1d:e8:f0:34:08:c5:58:28:86:35:63:91:ee:fb:
6c:a5:1a:af:ee:08:32:78:d2:f3:62:21:16:10:b2:
60:3e:f0:85:3d:e5:90:1e:5f:7b:de:0d:0b:b3:6c:
50:de:78:1b:44:16:05:79:e9:3e:86:f2:94:49:37:
fc:c1:3d:69:e5:9a:ab:e7:f1:5f:c3:db:06:cc:50:
92:32:b6:73:ce:b5:08:86:a8:7c:1c:66:92:24:84:
b9:5d:51:65:da:1c:8e:6c:8d:c3:bf:3a:eb:fd:ad:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:7F:18:45:45:D0:A7:E7:2F:64:9E:08:C0:11:AF:16:5A:7A:C6
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ae:e7:68:14:31:01:eb:ae:84:96:d6:dc:f5:5b:55:0a:c5:
f7:94:ee:1d:00:e9:20:8e:5f:d8:1f:cb:92:a7:0b:51:b8:3e:
4f:3e:25:bd:e4:7a:c4:94:63:72:ec:b1:75:05:7f:eb:fb:e1:
b1:70:c1:bd:87:35:02:8b:be:31:b8:4d:8d:b3:8c:dc:40:49:
e5:0e:96:09:33:a5:a2:5b:55:13:16:d7:5f:ee:23:81:73:62:
0e:93:6d:f2:45:dc:21:b6:57:e5:1e:a4:fd:69:8a:86:ec:cb:
8d:f1:55:6c:5a:6c:ed:71:17:be:b1:8a:2a:8b:7f:36:8b:54:
63:93:42:ef:01:20:6f:d1:13:1f:1a:0f:9e:2b:86:48:a5:2b:
12:4f:ea:b7:c7:a9:0e:c5:db:4a:1a:84:71:0f:a3:23:2a:35:
46:28:e3:2d:61:c9:88:08:f4:a9:da:06:36:5f:07:47:a2:2b:
2d:49:17:cc:35:7b:cc:57:7f:a2:ae:40:ba:dc:06:ea:90:60:
3e:87:f0:31:a0:03:e0:d2:2a:6d:ad:f8:ff:a4:e3:8e:9c:31:
d2:5b:cb:e5:fc:63:78:a1:ea:cb:b0:58:e9:df:8f:4a:49:08:
08:1a:92:d2:65:a9:58:2d:d5:2b:a6:5d:8a:2f:a3:2c:bb:20:
89:66:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:53:42 2025 by rpki-client