Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: GnaFJvfProSkdV46ekjltz3E780l0Me/WZEp4QvxaOI=
Subject key identifier: 3C:4B:0F:3B:E5:3C:70:DC:F8:77:6A:D4:5D:E3:8E:20:B9:65:52:5A
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 0198499C5C6ECAD28D113B3B1D40647CB61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0DEA
Signing time: Sun 27 Jul 2025 02:00:40 +0000
Manifest this update: Sun 27 Jul 2025 02:00:40 +0000
Manifest next update: Mon 28 Jul 2025 02:00:40 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: JwLNWTRrr2N5kAO0tyte+2qyW3f1JrO/qWI/YkZjzhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:5c:6e:ca:d2:8d:11:3b:3b:1d:40:64:7c:b6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Jul 27 02:00:40 2025 GMT
Not After : Jul 28 02:00:40 2025 GMT
Subject: CN=3c4b0f3be53c70dcf8776ad45de38e20b965525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:d4:d3:ac:a2:de:29:b2:ad:bc:dd:83:b8:
1f:bc:ef:5c:21:16:cc:37:ca:f5:c8:c5:da:be:46:
c4:28:b2:15:ea:c0:2e:e1:ed:5d:4d:73:00:c9:9c:
7d:02:65:3e:39:fa:43:58:1d:fd:fa:8a:87:54:e6:
27:ea:bf:bb:a0:ce:20:8c:97:c1:f9:c0:18:bd:f1:
d3:2a:23:3e:22:95:a7:13:5f:4f:46:d1:11:3f:c2:
a2:ad:b0:b1:e1:14:2c:00:01:93:6e:50:02:e8:50:
e2:3d:d8:06:74:5d:89:58:56:07:a0:8d:2b:cd:f3:
0e:83:06:3f:f6:83:77:84:41:ab:71:68:48:f7:4b:
51:e9:4f:a5:77:38:f6:10:67:ff:df:7c:22:41:ef:
fc:06:c1:06:22:f9:ae:42:a0:91:92:ef:db:f9:0a:
78:16:5e:d2:cc:6f:83:ce:30:69:59:8d:a1:42:fc:
52:96:10:5b:8b:9a:be:00:85:bb:c0:e5:c0:e6:a8:
8d:1a:ab:c4:35:6c:d1:06:35:dc:66:90:3d:de:4a:
19:70:b3:8f:fb:2d:a4:db:e0:a3:64:93:f8:6a:16:
c4:b3:70:ea:91:39:3a:b1:96:49:c8:16:2a:2e:25:
63:a8:3e:77:f5:af:09:63:54:67:6e:9e:94:fb:9b:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:0F:3B:E5:3C:70:DC:F8:77:6A:D4:5D:E3:8E:20:B9:65:52:5A
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:b1:31:d7:5b:ba:12:22:3e:39:c1:8e:48:8d:c5:db:92:
85:8d:1f:ec:4d:6a:3a:55:f6:03:b5:4b:61:a5:86:75:1b:53:
90:77:56:80:30:3b:e4:ef:99:01:69:09:20:d6:a6:c0:e6:e7:
de:c3:6e:a4:d3:64:ea:57:7b:a0:20:bb:1b:df:d6:02:f0:77:
20:5a:e7:38:d4:45:fc:b2:7c:b4:62:58:fb:3a:fc:3f:59:28:
ea:aa:36:c1:dc:9c:c0:08:9c:8e:56:81:f5:e3:08:b9:7b:59:
50:76:0d:a1:05:ea:05:f8:47:68:16:21:be:03:e8:48:ce:45:
d8:ef:51:f8:16:0c:4c:2b:0c:7c:2b:b2:b8:ad:41:4e:c9:2c:
ba:79:e6:ce:95:f7:34:db:df:60:17:98:c4:46:61:75:af:f1:
f8:f4:74:55:90:00:dc:73:ed:4d:c7:4e:0e:84:0a:17:f0:54:
67:eb:b1:57:73:74:71:3c:32:e5:60:2e:e9:7d:c7:85:3e:8d:
44:34:c8:21:21:12:30:c7:70:a0:a2:8f:2a:ca:e9:6e:44:29:
02:8b:03:10:f4:26:51:2e:70:9e:c7:44:7e:49:ba:f8:ae:28:
15:e0:6d:18:80:1c:a6:17:0e:3a:42:a5:21:62:b6:4d:e2:02:
5c:e4:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:44 2025 by rpki-client