Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: +GxBg9IHKV9T0aFn3xFEXk/WjDI2JpXeMVSYV8ZY3Tw=
Subject key identifier: AE:A7:45:23:0F:85:03:66:E8:13:78:5A:8F:7E:9E:98:17:12:27:68
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01984A4174D0647C1E32D05EAFE1246A19D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 02B3
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: rHpyDIHNj/wgloLpp79UcJufAHwc5cfm6CbXb91GqfI=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:74:d0:64:7c:1e:32:d0:5e:af:e1:24:6a:19:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=aea745230f850366e813785a8f7e9e9817122768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:68:a8:1c:af:de:67:7a:a2:c9:fe:07:ec:
2f:47:55:28:2c:07:ad:df:34:9e:99:0a:0e:97:b7:
44:c5:d6:8a:9d:76:ae:14:d9:3a:e7:e4:7c:6b:e6:
9a:5c:e0:f4:6a:85:e8:a0:62:85:29:29:b2:b2:15:
25:f7:be:33:2e:80:bb:12:7f:9b:07:4e:6c:b9:fb:
96:a5:cd:91:f3:66:86:ca:b0:21:6f:41:46:73:e3:
be:20:9e:fa:f9:26:7b:10:b2:87:02:a6:30:96:68:
87:22:5a:9e:ed:e7:dc:66:56:82:10:88:5a:c7:7d:
37:e5:6a:ac:dd:9b:bd:32:4c:05:a0:77:b6:52:a3:
d6:0b:a6:a6:83:33:ac:dd:de:2e:f9:2b:de:2f:d2:
b3:d2:07:0b:70:82:2b:38:83:21:60:1c:fc:22:07:
ca:a6:7b:4c:00:01:b7:9c:4f:b3:13:f6:55:47:40:
8a:ed:61:51:27:6d:a4:de:8d:db:9d:90:94:d8:c1:
2f:7e:d6:99:31:4c:12:e0:dc:a1:1f:02:31:1e:15:
f4:1a:b6:dd:86:39:cb:ab:1d:38:ea:e5:a3:0e:5f:
d8:9a:bd:5a:ab:97:e4:d1:f2:6e:a9:52:14:24:c5:
87:57:c8:bf:44:5a:41:35:83:e1:b8:33:85:dd:8a:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:45:23:0F:85:03:66:E8:13:78:5A:8F:7E:9E:98:17:12:27:68
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:38:ba:c6:76:0e:42:5a:ae:31:42:2b:7a:e3:d1:38:59:
46:42:96:b3:5d:95:71:86:7f:df:e0:b8:87:78:fd:be:3d:69:
f5:31:01:a7:80:86:27:08:a8:4b:5b:cf:79:af:21:e0:4f:8a:
99:00:22:51:3d:86:7f:8e:04:5a:f0:7a:78:33:f7:51:db:9d:
64:6a:01:e2:4e:43:6e:fc:17:eb:9f:dc:6e:fc:91:b4:a9:2c:
cf:94:8f:72:f2:37:e3:25:a9:a1:c4:d6:98:d8:82:69:8a:41:
86:3e:66:0a:6f:95:b1:38:17:38:68:cf:be:4a:f1:a3:77:e4:
87:cd:9f:78:74:bf:39:36:73:79:06:d2:13:9b:20:43:a4:da:
b1:11:ae:76:18:a1:bb:91:b2:40:e5:a2:8a:be:68:94:92:ff:
9f:05:60:2a:ab:94:88:6a:9d:f9:4d:ba:d4:1c:b6:7b:5c:5e:
59:92:60:c7:3f:a1:93:b9:32:a6:21:3c:79:b1:56:a3:6e:99:
d4:21:68:b2:73:1a:2e:22:b9:14:6a:15:f1:47:56:f6:63:d6:
84:8c:06:f5:70:df:53:a7:27:ea:c2:1d:d5:39:62:b2:21:5d:
0e:89:97:5d:c6:ac:77:56:99:4f:ae:bb:52:28:21:76:cb:51:
b2:ca:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:49:38 2025 by rpki-client