Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: p8ORsNqod2V2iPdTb1E8gOfUMB7jqreVPxMvmgLH5nU=
Subject key identifier: C0:41:46:EB:6E:7B:BC:62:DA:43:E0:18:F9:D1:D0:F9:96:FD:17:E1
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0198353A5706790C31F93443107711C91EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0D09
Signing time: Wed 23 Jul 2025 03:01:12 +0000
Manifest this update: Wed 23 Jul 2025 03:01:12 +0000
Manifest next update: Thu 24 Jul 2025 03:01:12 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: ygOMVTPu106Th2gPSAa+GwHmSOMZQstyDqAKtreuUqg=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:57:06:79:0c:31:f9:34:43:10:77:11:c9:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jul 23 03:01:12 2025 GMT
Not After : Jul 24 03:01:12 2025 GMT
Subject: CN=c04146eb6e7bbc62da43e018f9d1d0f996fd17e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:8e:40:64:27:9e:f4:7f:4c:8c:5a:fb:00:
7a:e4:22:7f:1c:d9:bd:4f:ac:be:0b:8e:39:5a:d2:
db:e0:92:1b:80:bf:cd:61:d5:27:75:63:59:b0:ba:
ed:2b:18:1f:81:84:0c:e8:bf:13:8a:08:15:73:d0:
c7:49:cc:07:cd:ee:dd:b6:36:ef:31:3b:da:10:d2:
b7:d2:fd:d0:2b:22:fb:9d:01:53:5e:66:4d:4f:15:
db:4e:67:6e:16:46:bd:7b:c9:8b:23:60:30:25:93:
bf:ff:73:c8:93:51:71:f1:3f:f6:b6:a9:94:04:93:
84:56:4c:3f:1e:11:46:44:30:44:fe:e4:91:b0:4a:
c1:86:f3:00:90:62:5f:2f:81:df:e7:7d:80:a5:17:
32:a2:b2:cc:7c:50:23:6e:f6:2d:71:58:c5:97:8c:
08:30:c5:a7:53:0c:80:52:0e:3b:1f:c1:9a:05:d8:
b6:f1:38:0a:c4:27:3c:4b:eb:24:6c:d6:fa:79:f9:
1a:c3:82:59:45:8b:5e:54:d9:75:25:6b:14:1c:46:
fb:8a:4c:4a:0f:e4:77:eb:0f:97:46:be:f3:c1:1c:
ff:cd:0a:3d:76:18:db:4d:10:87:ec:ef:19:02:5a:
aa:c1:5f:33:d5:c1:d5:75:67:fa:61:8b:e4:6c:73:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:46:EB:6E:7B:BC:62:DA:43:E0:18:F9:D1:D0:F9:96:FD:17:E1
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:61:28:7a:13:58:ec:ae:06:37:ad:df:62:87:e3:bb:39:
f0:ac:eb:0f:57:23:44:f7:32:9c:c7:dc:38:a6:92:15:6b:c4:
a6:46:9e:a3:eb:ac:3d:22:7f:af:c3:81:15:85:5d:07:17:bf:
1b:f9:28:bf:b4:1d:ae:d1:6c:82:65:eb:a1:58:1c:0c:43:e2:
29:fd:8d:ab:8c:e2:e1:06:30:06:f2:d1:cd:f7:5a:0e:99:b3:
91:b2:be:13:97:8d:94:11:35:92:a3:f1:73:d5:e1:6c:11:1e:
7c:2d:94:a7:18:5e:0f:ee:94:f4:30:e4:d9:9d:ac:d9:fc:9f:
e8:b4:29:e1:d9:2a:7a:c2:b2:74:4d:16:30:2e:b3:89:c8:05:
e7:d0:07:5c:5c:33:3a:b6:b2:f9:86:b6:e4:f8:43:1f:92:08:
5a:b6:6e:91:00:bf:68:36:1b:43:bd:03:b6:49:27:75:7a:36:
91:df:1e:ae:c1:6f:79:25:88:65:ff:e3:a9:77:89:2f:d4:cc:
75:05:20:d8:81:0e:48:ef:51:44:04:28:47:73:8a:55:3c:85:
a7:d0:c9:18:4d:77:86:a4:2d:af:c4:6c:00:26:86:46:a6:34:
80:f0:28:fb:64:33:64:c3:2c:ea:19:b7:bc:d7:95:9c:4e:45:
ae:75:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:17:05 2025 by rpki-client