Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: Pl7j5+lMTzAMlut3tinERXHRJEuihG+gx0ehzYyrrEE=
Subject key identifier: 5C:D0:D6:C4:53:23:F1:05:4D:8A:16:AC:3A:7F:E5:EC:79:17:61:12
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 019955D528CD55E55AEBD1E9D89E57FD9D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 0703
Signing time: Wed 17 Sep 2025 04:00:56 +0000
Manifest this update: Wed 17 Sep 2025 04:00:56 +0000
Manifest next update: Thu 18 Sep 2025 04:00:56 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: DL7o9xZLf1HeMzdl7d3ChJyfHqXmhyUqrSLa3bA/370=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:d5:28:cd:55:e5:5a:eb:d1:e9:d8:9e:57:fd:9d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Sep 17 04:00:56 2025 GMT
Not After : Sep 18 04:00:56 2025 GMT
Subject: CN=5cd0d6c45323f1054d8a16ac3a7fe5ec79176112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:95:77:7f:8b:98:38:80:50:5b:69:5b:5b:6f:
e5:26:e9:69:dc:57:4a:51:5a:c6:c0:22:11:62:e6:
af:aa:e3:ae:ae:b8:06:d5:f5:98:d7:1c:9e:c8:db:
be:83:94:0f:0e:bf:1c:5a:30:56:a8:27:22:5c:41:
b0:ed:63:de:c5:16:9d:75:4c:c9:8a:fc:62:9c:8c:
a5:26:70:67:00:fe:10:2c:0a:fc:41:51:ae:82:49:
cc:c4:db:8e:73:4e:b8:26:b0:0b:be:28:d9:c9:91:
21:d5:09:6c:19:86:2d:14:93:26:f3:fb:12:ef:89:
18:fa:14:4a:e9:eb:25:0f:a3:56:12:1e:ab:e8:d9:
22:e6:44:13:8b:9a:11:01:a6:8d:db:77:0c:aa:c4:
52:23:17:5b:4d:7f:07:2d:20:09:4f:34:86:9b:1e:
8d:b5:05:c7:47:9f:64:53:20:51:10:1a:6d:42:49:
ac:97:67:8c:d6:98:3c:25:ca:9f:3c:55:d5:e2:77:
2e:06:ee:9f:d0:34:ef:ee:99:8d:66:c1:09:32:cc:
b1:70:24:4c:eb:7b:de:a4:bd:1f:71:c1:35:c5:c7:
45:50:cc:d2:c1:a5:bb:a0:0d:2e:8f:2d:79:43:97:
28:9c:82:51:2c:b1:ef:6b:5c:1b:82:9e:0a:5e:c4:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:D6:C4:53:23:F1:05:4D:8A:16:AC:3A:7F:E5:EC:79:17:61:12
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:f3:44:bc:24:f5:6e:ce:c6:a8:34:b3:4f:0d:c3:a2:b5:
6e:db:86:03:a5:f7:8c:66:27:0b:8d:8f:99:20:4c:59:a3:e2:
60:03:f2:93:5e:77:9e:06:51:5f:68:3f:32:25:81:92:db:1f:
a7:40:16:52:94:cb:26:b4:5b:1e:b6:e9:a2:91:1f:60:60:64:
3b:a0:21:c8:7d:7a:bc:2a:12:04:f9:d3:1d:c5:de:29:3c:ee:
34:c7:ea:30:d9:1c:30:9f:f9:15:a7:bc:80:1e:cc:3a:d4:f2:
99:57:b0:6b:d9:7f:c3:9a:3c:f4:e2:b9:4e:27:fa:41:9a:23:
45:53:57:bd:29:1f:cc:8a:d2:0e:34:27:f6:a9:8f:e5:45:4e:
ae:a8:5b:72:03:ff:ed:19:80:a4:6c:85:a8:e9:65:10:53:23:
e3:60:0e:21:4b:f9:e7:aa:f0:49:f3:34:68:0e:51:a0:31:6c:
ce:e1:6f:1e:6c:cd:4d:f0:8f:53:a2:11:f5:bb:97:5a:6f:91:
d4:80:78:97:99:01:2c:26:d9:6e:dd:38:15:5a:92:7c:49:dd:
91:0c:6f:55:dd:4d:45:fc:3d:cb:a9:79:e8:8e:ea:53:95:36:
b8:a0:e9:68:ba:28:a8:26:39:7d:59:79:07:be:cd:67:8d:10:
78:49:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:45:44 2025 by rpki-client