Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: 6lTs5qKNoU7yRh3vtinST9ap3tZUG0WW/UWhJZUopTA=
Subject key identifier: 21:A8:FC:86:7B:1F:CF:7C:CA:57:2A:3B:CC:75:C4:A6:A0:B2:14:84
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019845BFAD249C12D8CC14D2EFB20660FA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0B22
Signing time: Sat 26 Jul 2025 08:00:46 +0000
Manifest this update: Sat 26 Jul 2025 08:00:46 +0000
Manifest next update: Sun 27 Jul 2025 08:00:46 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: A78YPK2/Qu/PLI5qqqmG0Mn9LkZ5j/djptYcHQKCpwE=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:ad:24:9c:12:d8:cc:14:d2:ef:b2:06:60:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jul 26 08:00:46 2025 GMT
Not After : Jul 27 08:00:46 2025 GMT
Subject: CN=21a8fc867b1fcf7cca572a3bcc75c4a6a0b21484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:ec:00:95:5f:1d:7d:bd:b5:7a:41:87:1d:
81:48:3b:18:07:2f:9c:5e:46:3c:8d:05:d5:c8:0a:
7b:16:10:eb:db:a5:16:65:d3:be:03:c1:56:cf:9e:
a9:86:42:9c:38:75:b4:80:a2:4b:b6:87:64:34:08:
30:28:78:17:6b:43:37:e3:e0:41:b9:7a:31:46:ce:
85:e3:7d:d1:fb:f9:f4:67:2a:26:a9:a7:fd:e4:d8:
1a:a0:07:99:8e:cd:06:12:8e:f4:2b:ca:3d:6e:91:
fa:a2:10:36:6b:9d:70:c7:37:e3:7f:db:6f:89:2b:
d4:fb:68:2b:a6:ef:1d:2e:e0:66:8d:eb:24:57:a0:
8b:4e:8d:52:a0:9f:16:ff:d8:4f:dd:de:33:61:ed:
cf:a0:66:38:05:40:fe:70:c9:e6:dd:b4:79:5b:fd:
60:d6:5e:d0:40:ed:06:55:db:90:09:57:a7:7b:6c:
23:85:16:25:a1:3f:a3:c7:92:0c:31:b5:f4:db:8c:
71:84:c1:58:73:49:ee:5d:f0:95:e0:7e:cd:c5:f3:
32:43:ba:ce:58:7c:3e:66:fe:00:0c:f5:1d:5e:b6:
1a:e7:12:67:4b:d8:46:d8:82:fd:af:c7:a5:ca:93:
40:a8:ba:76:1a:80:7e:1c:d5:da:35:04:b3:a6:ea:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:FC:86:7B:1F:CF:7C:CA:57:2A:3B:CC:75:C4:A6:A0:B2:14:84
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0d:91:2e:42:01:50:13:56:ff:5a:55:f6:e3:8d:73:c7:3f:
a9:6a:8b:77:f9:72:f1:06:34:4a:19:86:c3:1f:d4:38:ef:54:
33:58:6b:51:54:38:78:ed:f2:9f:3e:b6:0c:a4:3d:1f:22:cf:
c3:b3:da:bd:4c:97:a9:50:1d:ec:bd:4f:6e:38:50:cf:8a:81:
2e:96:7d:21:ae:fe:8b:b5:6f:01:71:9d:15:13:51:eb:09:cd:
a3:55:f2:d4:57:1a:1c:04:f3:22:cc:c6:ee:1f:48:7f:19:aa:
c2:3b:11:da:a2:c7:81:0b:a8:b9:4c:e4:0d:73:05:44:cf:9d:
b9:0c:61:12:6e:29:d7:1a:69:0c:c7:96:ce:71:a4:15:99:5e:
64:84:f8:07:90:1c:6c:52:7b:e9:78:fa:22:5e:28:40:fc:fb:
86:ac:78:55:4e:92:99:90:bd:9d:74:20:fa:30:c0:59:4c:22:
70:08:e0:5c:e6:8c:ad:aa:ee:2e:2d:a6:69:66:27:3a:22:ed:
38:62:74:89:80:d8:54:ed:ed:e8:82:eb:f7:fa:26:50:f2:52:
63:fd:14:13:7a:5d:49:68:01:1b:31:9f:f0:6c:02:8a:70:02:
d4:4c:a7:f4:4d:7e:8f:7e:db:b6:0d:48:6e:05:01:d9:49:ce:
a4:1c:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:26 2025 by rpki-client