Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File: OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier: nuMXcxxZWTU/FvwzXP8PDN3w4LTTX5hGSMOLPfksNHQ=
Subject key identifier: 3C:92:72:F0:95:58:37:83:0F:D4:AA:22:CB:A3:4D:49:2A:8A:73:98
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 019853E95557952D2766C2388FCE28291196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number: 15F7
Signing time: Tue 29 Jul 2025 02:00:57 +0000
Manifest this update: Tue 29 Jul 2025 02:00:57 +0000
Manifest next update: Wed 30 Jul 2025 02:00:57 +0000
Files and hashes: 1: EQS-D1pgF9X9JxFRgbIMqF1eIP4.roa (hash: X1oH+D4EKjN/FZ/0o/XNZpi/rX7eBTsOxnwwIoAyafs=)
2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: 6WkNznFGidapQtsouGmCNhYFeVAwOIU45mtIt+1LwpI=)
3: VK52xwAI-aKIKTeQlztwUDOO02E.roa (hash: C9ydrT1jO/tCG0jTbHX7J5njz1R33YyX3/MyTTWyLe8=)
4: cVloRXAZs5Oo5mzrcunH3Tc2864.roa (hash: PRZbsG5bEI+5vtvix6l8s4vQ6r0jrrNQcUM/ZaoxHsc=)
5: fTKyWpeZBzHIpHOAP_HWdyLZ9gk.roa (hash: NJGE7uKTYs1I+EUOo5wFk+oBfIXQxyDxL9xtb3Bt434=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:55:57:95:2d:27:66:c2:38:8f:ce:28:29:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Jul 29 02:00:57 2025 GMT
Not After : Jul 30 02:00:57 2025 GMT
Subject: CN=3c9272f0955837830fd4aa22cba34d492a8a7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:2a:cd:a5:7b:57:db:9c:1f:89:c8:b1:34:
36:a0:40:85:7f:97:dc:08:ff:5e:83:b8:bf:43:51:
df:cf:3b:11:41:c4:44:df:14:b4:16:c2:3c:0d:c6:
c1:13:6a:13:07:9f:37:33:30:a1:df:98:62:15:d1:
2b:a9:fe:0d:34:c4:50:ad:5b:96:5d:03:16:87:37:
02:62:49:8a:af:17:d9:02:30:b8:38:cd:12:fe:26:
ed:ef:f8:f9:d1:a5:45:86:10:08:bd:e4:39:0c:11:
a2:31:f4:26:db:be:a2:89:c8:e9:b9:87:da:68:4c:
bc:53:13:cb:ea:c6:7d:71:c8:83:a0:c5:a9:a9:91:
cb:16:5a:a2:ec:d4:26:8f:c1:bf:9d:3a:e1:01:c7:
86:c8:06:64:b1:e4:eb:76:38:51:44:57:e6:24:24:
59:08:1e:15:5f:a1:c8:98:7c:a2:43:96:2a:75:6f:
13:51:12:a4:e2:ac:6e:2b:51:db:a3:f0:d9:5d:e5:
ab:e2:61:ed:1b:fd:fd:8f:58:fb:03:ab:27:fe:e4:
71:46:d7:f4:69:82:2e:a7:40:5b:4d:b5:3a:45:88:
66:15:2a:4a:fe:ed:4a:79:9e:15:f4:a1:dc:95:77:
2e:a2:e2:50:d8:99:d4:2c:08:ae:1a:bd:70:bd:6c:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:72:F0:95:58:37:83:0F:D4:AA:22:CB:A3:4D:49:2A:8A:73:98
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a6:be:a9:fd:e5:09:38:7d:61:45:10:39:e8:71:8f:a2:60:
7e:65:5c:70:d3:e1:ad:d5:53:68:43:d9:3a:40:dc:d8:72:99:
af:ea:58:50:d5:e9:83:50:d6:6e:d8:98:39:ac:bc:72:a3:1e:
da:30:cc:02:3c:96:dd:14:9e:dc:5e:5c:27:e7:fd:27:ac:0d:
b9:75:1e:e9:d2:8d:47:13:c2:84:5e:31:7a:85:b4:19:36:94:
64:0a:a1:a8:11:cd:3d:ad:af:01:a0:84:a1:b1:b3:72:b7:17:
67:ce:98:77:f0:5c:73:88:0a:a8:19:b4:bf:7d:8c:ed:20:54:
f6:45:49:ea:33:2d:b7:1c:79:a4:ac:70:01:50:14:69:6b:5a:
8f:8e:0d:1a:68:a3:5d:66:ab:f9:1e:47:cf:ea:c8:a5:61:0f:
e3:5f:41:0f:b7:e1:e9:bb:1b:fd:dc:63:50:42:b5:19:06:9f:
47:93:4c:d0:cb:da:b3:88:5b:d0:a4:14:ee:ea:be:a8:34:fb:
93:a2:72:a1:0c:6f:8d:cc:8e:e2:0f:7f:61:6c:0d:a2:e7:db:
59:11:e4:52:2e:d0:e7:58:1e:6f:83:0a:aa:88:76:6d:8d:87:
71:7c:26:59:01:7c:43:18:35:1a:17:18:c8:82:77:07:db:db:
a2:8e:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:45 2025 by rpki-client