Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: xzBWm41PTINNXsgzx7XZ5bDU0q9TmE49UlTAnz8FE8M=
Subject key identifier: 37:03:CA:23:B2:4A:B4:61:A9:0F:E1:90:37:E3:62:1F:7C:48:C8:EC
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019847ADFADAA1972F5A7200FC1CAD37EC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 17:00:40 +0000
Manifest this update: Sat 26 Jul 2025 17:00:40 +0000
Manifest next update: Sun 27 Jul 2025 17:00:40 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: pRKWIAF2SsvGSmafbtTAgesGpm/kIQMGdZKTPrCDrfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:fa:da:a1:97:2f:5a:72:00:fc:1c:ad:37:ec:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Jul 26 17:00:40 2025 GMT
Not After : Jul 27 17:00:40 2025 GMT
Subject: CN=3703ca23b24ab461a90fe19037e3621f7c48c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:b9:dc:b4:05:96:cc:fc:77:09:19:d8:a2:
91:46:c7:b2:70:49:7a:b9:b0:cb:ea:f2:e7:06:66:
c1:17:63:a5:c2:ca:66:af:57:b2:dc:c1:29:8d:57:
a4:e4:5e:2b:9e:42:21:f3:7d:2c:5b:c3:38:61:7c:
53:3d:48:f4:be:b0:f2:f2:5d:e6:19:30:e2:4f:fb:
70:71:c7:0b:70:4b:56:ad:4a:8e:d9:c3:91:19:12:
a4:06:61:7b:d2:76:9b:2f:f7:04:6f:10:ea:a8:af:
5f:51:12:d0:46:0a:93:fc:ac:89:26:65:02:19:1c:
6d:f9:f4:7c:a2:f0:e7:45:49:45:2e:df:e8:8e:c5:
f6:fa:07:1a:05:9b:38:92:52:86:4f:f0:1b:87:a7:
e6:5c:5a:ca:5d:17:d9:5a:4d:fa:60:75:f7:95:89:
1d:0a:7b:d7:b0:63:fb:79:2c:eb:16:20:e9:36:96:
db:e5:05:9f:3e:54:ca:3c:fe:34:d5:d9:c9:78:a3:
ac:60:84:94:75:59:1c:b1:78:a8:89:d8:f4:e8:a5:
08:c7:91:06:07:0c:31:88:66:4e:c9:8e:61:bf:07:
29:8b:aa:86:5c:4a:40:13:c4:81:92:c1:7c:74:e7:
2c:c8:13:3b:93:90:ee:3e:83:1d:b2:11:84:92:1c:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:CA:23:B2:4A:B4:61:A9:0F:E1:90:37:E3:62:1F:7C:48:C8:EC
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:88:11:b2:3c:8d:78:4c:50:0f:9e:ae:3a:27:59:db:23:
ea:ae:f5:ee:9a:df:03:da:74:e5:cb:f7:3c:86:b3:42:e2:f5:
8f:07:16:8b:59:56:2b:8d:10:b3:90:0a:06:74:69:90:81:91:
b3:c8:f7:fa:f9:94:b3:46:39:5d:a8:68:00:3d:3b:21:a6:7e:
f6:08:3c:0f:77:5e:4a:fa:ff:68:70:5b:f6:0b:17:5e:39:88:
01:1c:ec:b3:4b:fd:1e:98:0e:db:cc:f4:e6:1a:34:da:ff:fd:
20:9f:d4:b3:5f:f9:84:26:da:3b:fa:d4:ff:4f:bc:3b:26:70:
88:8d:23:15:b6:12:e4:ff:41:fc:4a:92:da:f9:60:d9:10:71:
6b:b5:28:56:8f:0b:b0:19:9b:5e:97:c7:8b:d5:7f:e9:f5:54:
04:57:7d:f3:73:db:91:0e:60:ad:0d:8b:b5:3f:d5:20:0d:58:
d6:fb:b0:f9:06:61:94:d0:e5:c4:0d:0d:a4:74:5a:0c:b1:3a:
4f:7f:d7:04:b6:2c:35:ec:d7:fa:cd:19:c4:9e:9e:9f:7b:e7:
0b:d8:89:67:11:5f:65:97:ad:d1:c9:a2:8b:73:98:a4:82:c8:
b6:3e:e2:aa:6c:9d:01:4b:ca:99:43:e9:7c:5e:83:22:b0:4a:
0e:cf:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:49 2025 by rpki-client