Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: WUZXm2v7VasIw1M+vjPEqpyHyY/cZkS15XArcqeJWNE=
Subject key identifier: BF:52:B0:F6:9B:64:34:70:94:FD:37:44:A0:69:9C:EB:53:C0:F9:70
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 01984777062D8F503E7174E3FF91F6659D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 1294
Signing time: Sat 26 Jul 2025 16:00:39 +0000
Manifest this update: Sat 26 Jul 2025 16:00:39 +0000
Manifest next update: Sun 27 Jul 2025 16:00:39 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: AM475q5MO8a6QadKNN1ghPrpFNRC/TgxZqK8HM9+qXo=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:06:2d:8f:50:3e:71:74:e3:ff:91:f6:65:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Jul 26 16:00:39 2025 GMT
Not After : Jul 27 16:00:39 2025 GMT
Subject: CN=bf52b0f69b64347094fd3744a0699ceb53c0f970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:a6:29:96:b7:f7:af:48:37:11:61:44:b1:
df:cf:cd:65:c0:9c:c6:98:00:50:e2:14:29:81:b6:
ff:f7:7e:f3:79:80:56:20:1a:5b:2f:64:a1:e7:6c:
db:e7:eb:6f:a4:c8:d9:7b:a0:da:e8:02:b8:43:e3:
3c:2a:ad:0b:60:f4:5d:2b:18:03:33:b5:df:25:8e:
ca:8b:7c:e9:39:c0:59:27:a9:2e:fe:36:5b:1a:1f:
9d:c7:6a:23:1d:b9:35:83:73:6c:5d:c8:ac:a3:c5:
d7:36:89:48:f3:66:b8:9e:e5:3c:3c:94:39:cf:d9:
bf:2e:97:34:2a:40:ec:31:82:61:fa:1b:ea:dd:62:
65:f2:b0:a8:4c:78:d5:f5:4e:03:68:e4:f8:bc:a3:
a1:00:5b:89:0a:5e:39:0b:1e:b9:bb:93:7d:5e:21:
48:1b:f7:7d:61:15:4b:03:0e:82:34:54:30:aa:78:
67:d3:34:47:61:42:08:51:53:43:56:ef:ba:e4:77:
9f:3d:e3:5d:77:7c:1e:3a:49:fa:fb:ea:bd:bd:be:
00:ed:de:58:95:c3:35:b9:cd:a0:7c:f1:45:be:f7:
20:8d:6f:d6:51:66:43:82:d2:1e:f0:83:98:53:4f:
23:46:51:e6:01:6e:26:ed:c0:fc:64:06:e5:35:35:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:52:B0:F6:9B:64:34:70:94:FD:37:44:A0:69:9C:EB:53:C0:F9:70
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:32:dd:af:3d:5b:e2:9f:e8:4e:ab:e2:c2:4b:c3:7a:db:f2:
4e:4a:0e:88:6c:50:de:8b:7e:70:ff:7b:2a:32:bc:31:68:e4:
c9:88:cd:c2:05:48:3b:a2:84:ac:f2:42:1e:6b:3a:09:2b:df:
b5:be:fc:35:59:96:40:fd:22:15:b6:44:8b:09:a8:4d:94:2b:
e9:a7:dc:c3:b7:8a:f8:2a:29:7d:0e:65:01:7b:cb:c3:eb:4e:
b5:4c:9f:d7:57:c3:92:71:a6:e9:bb:7b:87:9d:20:b2:22:f8:
02:8e:0e:36:66:9e:65:10:64:11:61:17:d8:0a:b0:ee:9f:70:
1e:7f:81:d6:7a:9a:27:ed:5b:fd:c7:76:d9:31:04:9c:3b:1d:
40:d4:f7:3c:ab:fa:90:d4:de:f5:36:c6:32:12:4e:8f:e9:bd:
8b:e4:4f:a6:6e:d0:d8:b3:46:f7:71:0c:cf:e1:c0:01:02:1c:
b2:44:5d:d2:4a:e9:c6:23:53:0f:a5:a9:1e:86:38:09:79:5a:
d4:5d:b7:4c:9e:11:ac:7d:7b:00:89:a1:16:37:a2:27:f1:cd:
96:6b:cd:c2:dd:10:2f:e0:5a:51:5e:47:fc:57:0d:41:bb:6f:
2e:d7:05:b5:5b:53:7d:9e:1e:45:6e:cf:ca:4e:e3:ba:a8:cb:
f5:9e:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:04:24 2025 by rpki-client