Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: sA7ju7Q5Ueh5WJ2mu5gd5SkX+frhSOI0tp8Q4x6QMVc=
Subject key identifier: 47:68:F0:78:99:1D:F8:0A:86:77:A3:E7:38:60:91:71:89:68:1D:7B
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 01984B8AADDF6F165A412B097F6B26A7B9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 071E
Signing time: Sun 27 Jul 2025 11:00:36 +0000
Manifest this update: Sun 27 Jul 2025 11:00:36 +0000
Manifest next update: Mon 28 Jul 2025 11:00:36 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: p8WPFh3HV2JarfUerziUCUGGnFyiCZ9ctwDys5qzbDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:ad:df:6f:16:5a:41:2b:09:7f:6b:26:a7:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jul 27 11:00:36 2025 GMT
Not After : Jul 28 11:00:36 2025 GMT
Subject: CN=4768f078991df80a8677a3e73860917189681d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:db:f0:25:11:d9:3e:f7:eb:98:90:3e:9a:
29:d5:9e:89:fc:31:ee:b0:f3:cf:a0:11:e8:a1:00:
7f:27:35:4d:75:a2:68:af:82:45:47:57:c2:f5:e5:
56:62:dc:ee:69:57:0d:46:3c:d6:40:a6:a6:9e:8e:
03:78:41:39:37:be:25:03:1a:13:1f:30:3e:db:a8:
4b:59:2f:a2:9d:50:f0:07:fb:a0:5d:62:00:14:7f:
58:21:04:78:21:f8:29:19:28:f3:46:55:bb:16:b9:
67:10:69:08:f2:9e:0b:54:e1:a2:79:1a:d5:a9:59:
eb:ad:85:c2:b8:1e:12:eb:79:33:9c:b5:4b:bd:a9:
81:1a:09:fb:a9:1c:ec:fa:3e:8e:08:34:15:42:22:
dc:8e:c2:99:4d:ad:a4:85:8b:e0:bf:ea:c9:cf:df:
82:ee:46:3b:30:3b:36:10:b3:ff:47:cc:0a:e1:fc:
94:4a:73:90:ca:34:a3:85:18:55:df:d5:33:cc:41:
ac:65:61:6f:2d:2f:ac:ae:4f:8c:23:35:85:4c:5b:
74:d5:06:a4:d4:e2:14:be:f5:bd:aa:25:b5:9a:d8:
9e:01:34:40:50:4a:bf:dc:27:a8:e6:4d:5a:75:9f:
30:fc:2d:3f:47:22:11:4d:47:c3:79:f6:d6:d2:a1:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:F0:78:99:1D:F8:0A:86:77:A3:E7:38:60:91:71:89:68:1D:7B
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:05:dc:ff:3f:9b:a5:7b:4c:5a:65:95:1a:a4:ed:44:7c:
dd:26:34:fe:23:b1:86:45:80:90:0e:7a:8f:ce:67:24:d9:d1:
9a:3b:cd:68:b1:9c:39:55:eb:1b:39:69:f5:4b:f3:0c:e0:f2:
42:af:ba:c9:0c:17:7c:fd:aa:b2:93:7b:44:32:85:7f:d6:88:
ec:e1:19:53:a7:be:7c:38:c6:64:90:d8:af:f2:c4:54:40:0d:
95:a5:0f:27:c2:12:07:c6:94:95:d5:b9:56:1f:c3:83:d4:ce:
5b:92:5b:30:e5:5e:e8:fd:c7:72:1e:01:32:8d:77:69:5d:ec:
62:31:0d:e4:da:3e:ed:20:da:f5:42:12:71:b9:eb:08:59:ed:
3e:f1:8b:7e:18:9f:40:54:3e:cb:f9:6d:3f:a1:6e:7a:c9:e3:
2f:3b:5b:0b:03:37:bc:30:c0:76:da:9e:ee:5a:94:14:76:d9:
38:6b:82:64:b8:7d:b9:88:19:2d:ea:35:81:4e:93:c1:36:ef:
ad:90:a9:a4:65:8c:1a:94:c4:f8:11:e5:1a:d8:09:69:c7:86:
45:fd:ce:40:ae:80:4d:ef:82:42:7d:78:a3:f5:b5:1b:4a:2c:
4a:66:76:fd:18:84:c3:55:78:05:fc:9f:b5:42:bf:7d:e1:21:
8e:78:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:45 2025 by rpki-client