Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: CrliBHBSYzqRzmjkJREJ9Ukl3KCbwgf/0YsERZaJurk=
Subject key identifier: 8D:13:2C:76:D3:3A:9B:5B:A5:E9:4D:59:EE:CF:1E:A4:FB:04:30:ED
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0198530E37BEC7A7CEE95C27B007F007F065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1616
Signing time: Mon 28 Jul 2025 22:01:37 +0000
Manifest this update: Mon 28 Jul 2025 22:01:37 +0000
Manifest next update: Tue 29 Jul 2025 22:01:37 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: MbGhh1SMvwFOUu+QjGEDWUNA4koa4xtGmub/fCQvLm4=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:37:be:c7:a7:ce:e9:5c:27:b0:07:f0:07:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jul 28 22:01:37 2025 GMT
Not After : Jul 29 22:01:37 2025 GMT
Subject: CN=8d132c76d33a9b5ba5e94d59eecf1ea4fb0430ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:0c:6d:7a:9b:0e:e5:a7:f6:11:59:5d:29:
22:d8:b6:cd:9e:30:d2:42:27:4c:c9:ee:5f:f5:88:
fc:2e:81:2a:2c:9d:18:17:84:d1:a8:6f:26:e2:89:
f4:c7:a8:7f:cd:2e:e0:7b:c5:6a:01:70:7c:eb:09:
9a:be:60:dd:6d:9e:55:87:06:45:37:29:e2:9b:34:
d6:89:ec:2f:02:85:0d:c1:a9:2a:ef:af:c0:2d:f2:
fb:41:e4:88:07:de:85:f4:fc:ed:9e:19:90:49:22:
ec:10:dc:42:1a:d5:a5:47:0a:26:c8:4d:cc:f5:f7:
eb:eb:83:42:be:8b:15:a6:cb:be:35:fd:45:6f:17:
1e:c4:c6:0d:eb:4b:03:7e:7f:73:00:08:84:aa:63:
73:69:37:54:22:c9:44:e5:ac:67:8b:07:4d:cf:0f:
8e:22:1a:29:c5:67:94:38:9b:db:11:82:10:6a:c7:
45:d6:a7:85:b5:06:71:7e:33:dc:be:7b:f8:21:90:
d3:85:04:8c:47:f2:70:fa:60:0a:e9:05:59:dd:3c:
11:e8:f8:18:9a:03:27:dc:eb:ca:f8:12:29:cb:11:
d8:b9:df:35:1c:8e:59:56:41:48:a2:18:a6:17:88:
b9:11:63:c5:8a:6d:57:28:d3:a5:27:e9:3a:62:88:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:2C:76:D3:3A:9B:5B:A5:E9:4D:59:EE:CF:1E:A4:FB:04:30:ED
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:7e:d9:d8:50:02:2e:d7:c8:bc:29:4e:11:00:fa:dc:02:
0d:59:72:8d:05:bd:26:35:1e:68:6c:b4:e7:16:45:9d:63:04:
63:a1:1e:d8:4e:9b:d8:64:ed:b3:33:7a:2a:2a:60:8f:5d:be:
58:93:1d:cf:a2:91:28:60:55:de:08:fd:a3:ac:b3:22:13:7a:
eb:a3:d4:09:33:72:20:fc:49:8f:d7:10:df:bc:6c:f1:0d:ef:
03:80:fb:a0:bf:a3:61:3f:0e:0a:8b:2b:9d:f9:3c:b5:41:b6:
f6:cd:fb:f9:4f:5e:b2:69:26:82:08:74:f2:42:a2:bf:2f:73:
a5:d9:ce:87:93:2d:ed:ff:cf:2e:15:3b:1a:43:33:62:23:70:
c4:4a:48:19:75:8f:24:d7:cc:42:43:9d:8f:b4:4d:80:20:25:
23:d2:94:58:b3:41:b7:93:ce:c1:48:4e:c2:94:f9:cb:e7:d6:
e7:ec:e7:f9:8c:55:c7:53:d3:c3:bd:b0:1d:75:53:73:90:ec:
64:61:5f:83:1e:e9:a3:5b:0f:0f:b3:db:37:fd:b0:5a:43:65:
4a:c6:ef:fc:0d:48:2b:80:a2:c8:78:6d:5d:3d:f5:f9:e8:cd:
0f:9b:d9:60:4d:de:7e:b8:a8:a2:78:2d:d5:6f:23:17:6e:98:
17:61:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:39 2025 by rpki-client