Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: CSChtmp1LWU5q//0+umF95M/IgnV6L6bz0jDfWjTC/g=
Subject key identifier: D3:B8:71:A2:FD:A9:C8:C6:A5:54:F7:7A:B7:E0:E6:16:94:CC:FC:96
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 0198477862358F57305EB65F86E08793281B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 0677
Signing time: Sat 26 Jul 2025 16:02:08 +0000
Manifest this update: Sat 26 Jul 2025 16:02:08 +0000
Manifest next update: Sun 27 Jul 2025 16:02:08 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: dOXvwFMfWUyu0d0DCixFDHe+EsM1B0WUX8zyn+D3k6M=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:62:35:8f:57:30:5e:b6:5f:86:e0:87:93:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Jul 26 16:02:08 2025 GMT
Not After : Jul 27 16:02:08 2025 GMT
Subject: CN=d3b871a2fda9c8c6a554f77ab7e0e61694ccfc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:60:8a:06:db:1b:23:76:91:7e:71:70:cc:
35:fc:c2:97:83:e0:5b:23:bc:dd:2c:72:38:db:51:
2f:fb:45:73:7a:af:54:20:58:6d:16:9b:e3:db:d9:
9b:f4:cb:ca:78:87:87:89:66:f5:e3:8d:10:03:c9:
50:bf:5d:9a:eb:cf:11:e1:e7:a4:c3:76:24:77:10:
bf:4c:1d:95:23:a0:82:9a:ff:5c:a0:c1:48:2e:62:
83:85:54:1e:0a:1f:55:28:23:7e:1b:87:36:1d:27:
66:e3:db:05:db:b9:43:66:e2:07:98:e0:96:c0:00:
11:0e:31:a6:13:ee:2d:78:4a:15:07:58:ff:98:ab:
1a:bd:44:e3:df:09:bb:e0:66:75:44:59:93:45:03:
eb:b9:d3:06:62:fd:ac:48:be:a7:87:4c:a7:32:2e:
9a:67:f3:7e:ed:ec:f6:ad:3e:b0:52:ca:7d:3e:ec:
22:20:dc:c2:41:87:be:da:b7:fb:de:7c:cc:11:e1:
00:31:8e:c5:99:ad:74:ec:ce:77:87:23:9e:94:ba:
9c:d4:8c:d9:08:8a:e2:66:a9:92:37:64:3f:90:81:
3d:d9:d5:23:67:4a:d4:93:ad:42:86:5a:6c:74:8b:
e5:4a:15:b8:fb:94:dd:08:21:38:71:42:4e:39:41:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:71:A2:FD:A9:C8:C6:A5:54:F7:7A:B7:E0:E6:16:94:CC:FC:96
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:26:18:fa:e1:64:5c:de:1d:49:7f:c2:02:74:26:fd:9e:06:
32:65:2c:0f:37:58:95:30:7e:e6:03:91:8e:b6:8a:bc:80:4d:
fa:ae:44:97:e8:b6:72:10:33:ba:9b:09:cd:69:e6:d8:da:51:
61:5c:54:a6:a3:9f:93:35:8d:a5:5c:b8:64:45:ea:40:3d:b9:
75:20:fd:3f:08:34:51:f7:14:95:af:3c:b5:dc:8c:75:af:fc:
df:d7:a8:a8:d7:42:7e:ba:95:ed:fb:81:31:13:26:dd:da:7a:
58:a9:c8:f1:0c:71:d0:79:f2:0d:c7:6c:b5:dc:6d:0a:bb:98:
dd:b6:2c:c7:11:69:41:35:19:6d:ff:db:8f:13:1e:66:28:0b:
dd:41:4f:87:54:7b:47:22:b4:28:e4:3d:36:22:a2:4d:c6:c1:
31:6b:82:1b:d6:1a:03:46:cb:cb:65:ef:6a:c4:07:20:ac:fc:
33:0c:6b:e5:28:fe:df:80:19:a1:77:2f:48:f5:4c:45:eb:ce:
58:c5:c0:85:e8:35:a7:26:29:5b:5d:4f:6a:6a:30:dd:89:ec:
78:b0:9c:7c:21:ea:56:ff:d8:32:a5:e7:00:5d:81:25:61:df:
f5:e3:47:3a:c5:16:08:4b:fb:55:ff:ec:f9:67:01:ce:68:ea:
2a:20:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:45 2025 by rpki-client