Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
File: OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft (raw, json)
Hash identifier: er3Q3Lgsd5ja83icJ/E0qOD50+2yUSbICyBdRJvNyPk=
Subject key identifier: 3C:12:B2:F5:49:20:A1:37:84:D1:17:41:2A:A5:F2:89:E1:AF:56:4D
Authority key identifier: 38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
Certificate issuer: /CN=3866f7385005d5be6101727388e1b3271f644de4
Certificate serial: 01983B728CBDC73BC054D5A734C4068EA550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
Manifest number: FF
Signing time: Thu 24 Jul 2025 08:00:19 +0000
Manifest this update: Thu 24 Jul 2025 08:00:19 +0000
Manifest next update: Fri 25 Jul 2025 08:00:19 +0000
Files and hashes: 1: OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl (hash: HYKzDhXT0KGsQl/ahFk+/E9XOTbdwR88XVfdbm+WQ0M=)
2: cvTvlJFXIrx4LNBKFN32BnQowu0.roa (hash: 2SQfqAvlePWceYDa/Gr4IqsSS7uQeMq3g8yyqM6DnK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:72:8c:bd:c7:3b:c0:54:d5:a7:34:c4:06:8e:a5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3866f7385005d5be6101727388e1b3271f644de4
Validity
Not Before: Jul 24 08:00:19 2025 GMT
Not After : Jul 25 08:00:19 2025 GMT
Subject: CN=3c12b2f54920a13784d117412aa5f289e1af564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:93:12:3e:a3:30:63:5e:81:6b:3d:69:b0:
c8:63:9d:54:e5:de:46:8d:93:56:25:34:67:cc:aa:
82:6f:06:84:4c:ed:10:bb:e5:fc:22:03:2e:69:2d:
b5:be:df:eb:22:ea:6f:a7:45:e0:4b:81:f3:0f:33:
6a:d3:f9:88:ef:8b:ac:d0:b7:35:a8:1f:e3:9d:99:
fb:b0:18:9d:ce:ef:6b:0b:d7:a5:e3:34:c1:82:22:
8e:80:03:7b:b1:6c:28:a7:11:72:ca:7e:61:2c:60:
eb:ae:8a:f2:e9:22:92:a9:06:e6:d5:ab:c7:c4:ea:
cb:c8:b6:82:2f:40:45:13:c4:da:68:fb:2b:b1:15:
bf:0d:92:c9:bb:fe:cb:c1:4b:80:98:f4:81:a4:56:
6c:87:d5:a8:50:8f:eb:47:6a:1e:cf:6f:a9:de:26:
99:64:ad:86:e0:31:d5:c3:c5:f5:b8:d7:4a:20:42:
ee:fd:9a:32:e7:cc:ed:e7:0d:7c:ee:30:02:3a:95:
96:db:ea:cc:5b:d2:53:0d:46:d6:30:30:50:7a:c9:
3b:37:ca:f2:07:5f:a4:8c:fe:c1:e2:90:3d:f0:9d:
fc:09:5c:fd:31:49:6d:de:06:02:73:12:79:a4:a4:
cd:13:2e:54:ce:33:24:7e:6b:fd:31:4f:04:4b:1b:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:B2:F5:49:20:A1:37:84:D1:17:41:2A:A5:F2:89:E1:AF:56:4D
X509v3 Authority Key Identifier:
keyid:38:66:F7:38:50:05:D5:BE:61:01:72:73:88:E1:B3:27:1F:64:4D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGb3OFAF1b5hAXJziOGzJx9kTeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b06197-68d2-429e-ace5-e015bf3f33d7/1/OGb3OFAF1b5hAXJziOGzJx9kTeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6b:1f:fb:5d:7d:92:6e:86:bf:e9:9c:14:7d:12:69:b5:8c:
c5:4e:f6:35:40:2d:76:d2:c3:44:d8:75:53:74:54:da:dd:de:
d8:81:64:27:6e:bc:dc:6b:2d:ba:85:9c:fe:82:63:3f:3f:2a:
e1:20:f5:85:ad:cc:64:3f:f6:21:45:78:5c:6e:20:b5:e5:d4:
fa:0d:dd:da:db:ad:39:a7:99:5b:a4:7b:3c:1d:21:f5:7d:77:
7f:7a:d8:ed:a1:c0:5e:cc:a1:7c:b8:fc:46:5d:7b:30:b0:b9:
6c:3d:95:3a:71:bb:9f:f9:2f:52:31:7f:f0:f8:99:27:f4:8c:
8d:0b:48:64:df:65:3f:b8:e3:68:25:2e:07:75:f5:8d:0f:01:
4c:12:7c:6b:f5:5d:fe:ec:b8:2d:14:73:59:08:fd:79:13:af:
b9:1c:16:97:9f:e0:4d:26:12:32:1a:44:93:56:4c:8a:54:83:
be:24:70:58:b0:7f:e7:f7:fd:4f:ce:d1:63:90:cb:49:2d:fc:
33:84:de:73:c1:a1:bf:97:b0:ce:7f:45:d2:4b:5c:a3:de:7e:
37:4b:76:05:3b:6b:05:1b:61:c8:9f:3e:ae:94:88:e3:67:e3:
3a:f3:bf:ab:bf:21:c1:e9:53:e0:52:d3:fe:59:50:e6:1f:82:
85:a6:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:54:43 2025 by rpki-client