Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: 4zLyrYlpP2c8fTJqxwpt9qaBwWXMojdneaZgRSAeu2Q=
Subject key identifier: 0F:76:2E:0C:B3:28:B5:A0:00:1B:04:13:05:1D:3D:5B:F6:47:75:B6
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 01984AE5CE55D9480453B15818C39F6B6599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 1026
Signing time: Sun 27 Jul 2025 08:00:31 +0000
Manifest this update: Sun 27 Jul 2025 08:00:31 +0000
Manifest next update: Mon 28 Jul 2025 08:00:31 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: mdUxBIqDa1itqQ640v2ouAIAxLurdKDWcYfW1mnp9p4=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ce:55:d9:48:04:53:b1:58:18:c3:9f:6b:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jul 27 08:00:31 2025 GMT
Not After : Jul 28 08:00:31 2025 GMT
Subject: CN=0f762e0cb328b5a0001b0413051d3d5bf64775b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:ae:9e:f4:31:19:b3:13:97:72:33:6a:e4:
70:7e:17:f6:37:e8:2b:b5:23:c3:c9:a1:29:fc:30:
7a:6c:e9:5c:d5:17:9e:b8:50:31:c9:b4:5c:a3:7b:
68:01:5e:69:a7:da:3b:64:0a:67:de:d1:e8:f7:d4:
ac:cb:30:73:d7:82:d0:82:4b:8c:c2:b1:ab:4d:fb:
2a:de:9b:0d:14:04:08:9f:db:2d:a4:22:5e:90:28:
32:c7:b8:ac:81:81:dc:d1:fd:88:f9:c3:1a:eb:e1:
62:df:94:50:0f:8f:65:de:a2:4d:c4:e6:8b:bb:4e:
a1:da:bc:a2:fc:81:0d:fd:ba:e8:72:b8:11:5e:0c:
c0:e0:12:e1:52:e6:32:0a:3a:0a:9a:f8:b7:70:08:
64:27:f6:bc:54:4c:eb:85:ef:9e:95:dc:68:2a:b2:
8e:50:d2:bf:64:82:a2:22:7a:c9:ea:21:cb:f2:81:
a8:9a:fc:b5:be:7e:f3:85:cf:7e:af:c6:34:7d:c7:
6a:f7:56:c3:f0:cc:33:d6:bb:7a:fe:4f:55:16:df:
0e:ca:20:ad:53:8d:3b:21:79:7b:c9:7c:b0:88:bd:
70:af:62:97:ed:06:32:85:d0:af:2e:8b:f2:12:01:
5f:ab:bd:34:dd:4d:2d:d8:93:a0:ff:74:67:7f:9d:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:2E:0C:B3:28:B5:A0:00:1B:04:13:05:1D:3D:5B:F6:47:75:B6
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:9f:e6:2d:c9:6e:b1:fd:c4:f2:c3:34:47:3b:0f:aa:4e:
8c:14:b6:0d:25:cf:b7:01:43:2f:81:e9:3c:a3:32:10:0b:b4:
6e:e2:a2:0c:a2:f0:4b:24:54:9f:9c:a9:1d:27:9f:23:39:4b:
8b:d3:27:db:06:39:34:2d:34:27:f0:be:2e:72:3b:5e:79:91:
a7:03:49:89:37:3e:d6:c2:0c:d8:29:52:c7:1c:fd:1a:a2:ca:
d6:23:0f:b4:0c:e6:d4:c6:83:a7:7f:eb:aa:3c:70:ab:40:5b:
d7:1b:25:02:46:aa:23:c4:20:93:ed:bf:ca:bc:36:35:59:e5:
d9:94:1b:96:f7:69:a4:1c:c8:1f:d3:52:a1:ab:c8:e9:a2:c2:
a7:0c:28:9e:0a:e3:b0:75:34:34:d4:1d:94:fa:6c:02:3a:b3:
3a:ff:38:d4:92:0f:42:42:46:a6:3f:ae:1b:57:c1:76:3d:35:
d2:31:6e:69:14:22:bb:57:f0:40:04:db:31:f7:1f:16:19:8a:
38:38:89:7b:b2:ec:7d:4e:ad:a1:fc:c1:5d:82:5c:39:fc:63:
1e:4e:b2:35:70:1f:1d:6c:f0:b7:4c:fe:4a:1a:e2:fe:2a:54:
6d:44:80:4b:a0:2b:1a:1f:fd:7a:a4:5b:46:a8:7d:c5:d6:b8:
c6:c7:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:39:10 2025 by rpki-client