Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: DsongQQk+xAtu1vjEYfG4g2kNFPvmPso1YdI1V9pqQo=
Subject key identifier: F7:36:81:D7:D6:87:E1:E0:A8:8B:EC:17:CF:A9:4D:C1:21:79:F4:C5
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 01984AE5C19C120C35E4A78C466F341E420F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 1557
Signing time: Sun 27 Jul 2025 08:00:27 +0000
Manifest this update: Sun 27 Jul 2025 08:00:27 +0000
Manifest next update: Mon 28 Jul 2025 08:00:27 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: uOS4NC4TT8A5lehGNNtLMNcziHrecfE4KNxNlUxM5qI=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c1:9c:12:0c:35:e4:a7:8c:46:6f:34:1e:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Jul 27 08:00:27 2025 GMT
Not After : Jul 28 08:00:27 2025 GMT
Subject: CN=f73681d7d687e1e0a88bec17cfa94dc12179f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:c3:a1:39:f8:4c:91:c2:80:84:ee:2c:a8:
37:e1:40:67:79:19:8f:78:4b:70:31:2e:4c:3b:72:
eb:bc:e2:11:90:e8:bd:c8:39:96:79:4a:fb:c7:c7:
8c:1e:b8:75:e3:c9:ee:e0:22:8c:3b:0a:dc:5f:c8:
ec:a0:d4:62:5e:dd:80:1c:40:4a:d4:22:fc:d4:c4:
66:38:21:dc:81:9d:cb:66:86:0c:5f:c1:11:7c:4a:
0e:5f:21:39:9e:5e:f0:b5:9b:36:5c:48:cd:73:da:
61:08:7a:8e:3e:38:6d:17:3b:4a:f7:18:dc:67:b0:
b1:c2:f4:45:9d:58:ef:00:38:35:fd:e8:a9:8e:84:
81:0f:87:93:f1:99:26:9a:88:7b:6d:0a:cd:a7:3c:
98:2f:ca:ae:89:0e:1e:22:73:19:65:13:79:c4:a6:
36:61:4e:5a:e7:93:06:85:ce:0a:89:88:2e:7d:b3:
fd:39:41:5e:65:96:1f:30:97:04:d3:5e:dd:3b:a0:
64:76:e1:6e:2f:1f:33:5f:a3:3f:db:85:3c:f0:c4:
94:a2:53:35:65:0c:8f:eb:66:d1:33:d7:0c:1c:8c:
b8:21:10:6e:e9:94:55:79:c0:2d:26:61:35:25:68:
f7:cc:48:11:ea:b6:1c:b5:ae:e1:36:ce:2e:4c:7e:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:81:D7:D6:87:E1:E0:A8:8B:EC:17:CF:A9:4D:C1:21:79:F4:C5
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:ff:6b:ef:c4:5b:a4:e3:88:e6:de:4a:a1:15:aa:1c:ea:
22:58:54:71:15:28:f0:74:07:c2:d4:e0:2b:f0:71:e8:0a:e9:
57:c5:1f:b9:78:51:97:b4:5c:81:3b:68:5a:5b:64:69:1c:a0:
64:d1:5a:39:86:8e:25:10:e3:c2:e4:e1:23:f1:89:3c:a0:99:
b7:82:ee:83:d4:0c:a7:d4:12:2d:bf:8d:81:1f:3e:0e:51:24:
3e:22:f7:18:36:f4:8c:3f:32:55:1e:06:94:ed:66:a1:3c:64:
39:20:ec:4d:d2:29:fd:d6:6a:96:9e:2e:f0:e2:93:78:28:17:
95:f3:4a:9b:b3:c2:6a:7b:e9:5a:65:70:38:15:b3:1d:63:27:
94:ba:2d:dd:96:14:0e:cb:c5:db:9c:44:80:05:a7:d8:56:dc:
33:a5:09:7b:06:f9:1e:fc:d6:4c:6a:32:67:d3:86:b0:7e:f5:
e3:5f:4c:9b:26:a9:1d:0e:13:f1:20:3f:d4:75:b8:81:85:5d:
23:4b:da:fc:cb:f7:d9:70:9e:b1:54:16:df:6e:a9:8b:0f:db:
2e:58:1d:f1:2d:31:b1:20:08:d0:7d:5c:0a:5b:53:3d:41:d1:
2b:fb:dc:61:5d:86:10:f3:d0:40:0b:76:04:46:2c:17:76:d6:
fb:ab:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:18 2025 by rpki-client