Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: bxU7922aSxk8s7xLGbhUbFvpr5vt3tWN82dUo0+wi10=
Subject key identifier: 2A:4A:85:04:C0:AC:BE:58:4B:F0:FD:82:53:24:78:C0:49:04:AB:96
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0198530D04077CDA2C86EECD7F6BB1F3D2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 095D
Signing time: Mon 28 Jul 2025 22:00:18 +0000
Manifest this update: Mon 28 Jul 2025 22:00:18 +0000
Manifest next update: Tue 29 Jul 2025 22:00:18 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: KE+ed8czfN0UQPuRNDTsXHGjQ8WtdvbutUz0zfDUeEM=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:04:07:7c:da:2c:86:ee:cd:7f:6b:b1:f3:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Jul 28 22:00:18 2025 GMT
Not After : Jul 29 22:00:18 2025 GMT
Subject: CN=2a4a8504c0acbe584bf0fd82532478c04904ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:3e:d1:2f:3f:a4:28:0c:88:8b:51:ca:f6:
30:71:8f:a5:d7:f6:82:1f:2a:d3:8b:d8:7f:f1:4e:
f3:7c:e4:a0:d3:91:d5:72:1c:d3:43:ca:d7:99:75:
b6:1d:75:f4:eb:57:8e:c4:b3:94:ec:21:07:ec:60:
d7:72:8a:4e:a1:92:ab:14:b1:84:7d:e1:ce:39:67:
e3:44:21:5e:8e:e0:3c:3e:3f:a9:c4:b9:1b:a2:64:
fa:88:d3:f3:c4:a7:9e:e9:99:9a:7a:fe:94:95:d1:
c8:be:3e:2d:25:14:10:e8:d2:b7:92:8d:23:bb:7d:
83:57:0d:b5:b8:5e:d3:c6:e1:c4:c1:4e:9b:3b:3f:
6a:ee:be:e1:93:a4:56:fb:80:06:82:d8:f1:7d:c5:
06:03:a3:5c:72:f9:b2:24:b3:e8:44:2e:37:dc:df:
cd:39:f0:45:6b:0d:1a:80:8b:37:a4:41:22:13:df:
2a:1e:17:a0:af:42:99:8b:13:40:b5:a0:ac:56:5f:
1a:76:f4:86:0d:91:c5:d6:e3:b4:47:7d:11:e8:77:
df:a6:02:43:f1:ba:f0:db:13:e8:68:89:cf:ff:03:
90:e8:71:53:a4:76:bc:68:87:79:4e:5a:83:4e:e4:
aa:dc:4c:d3:70:16:9f:72:1d:ac:d7:e8:83:0e:eb:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:85:04:C0:AC:BE:58:4B:F0:FD:82:53:24:78:C0:49:04:AB:96
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:27:43:a0:a8:b4:ed:15:0c:f3:e0:34:c6:50:9d:57:49:
21:c8:c1:5c:8a:6d:e5:63:f9:9c:5c:41:ae:fe:dc:d2:6b:5f:
7e:77:a4:c2:f0:11:9a:6c:19:33:04:23:7a:5a:61:f2:5c:a2:
34:67:19:db:64:dd:9b:aa:bf:10:44:75:18:be:06:a0:36:50:
36:4b:e5:0a:37:61:c3:08:bc:30:80:03:e3:b6:97:3c:61:c0:
86:b7:b5:aa:cf:52:ef:e0:a3:ff:65:0e:23:c1:3b:bf:84:dd:
6f:42:ac:16:b8:fe:40:21:73:b9:59:63:a6:aa:28:28:7a:bb:
3a:c5:5b:85:db:22:5f:67:e4:2e:06:3e:29:37:38:2a:6e:ec:
6e:4d:05:98:98:84:6d:4f:e3:36:f1:6f:e8:58:9c:e9:ec:79:
ab:ba:ab:20:22:59:62:e4:ca:e7:d3:9c:fe:13:91:11:d8:61:
22:fd:81:ec:08:0d:09:01:5d:ae:e6:90:28:78:5c:09:f4:b7:
a3:dd:5a:69:95:39:4b:ef:20:ee:8e:5c:6e:42:68:e9:38:22:
37:cf:eb:0f:6a:be:0d:6d:14:b6:09:92:92:ec:38:53:07:5b:
0e:7c:60:37:31:1c:b8:77:0c:6f:c9:18:f5:2a:7d:fa:25:8c:
8d:39:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:32 2025 by rpki-client