Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: m+E5rUqpA2aMwjmUs9RYYbJSGk33dlA8zEbmX7sAhX4=
Subject key identifier: EC:50:AB:90:83:9F:7A:53:BC:E2:28:47:B2:55:30:28:93:B6:47:53
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0198530CFC16208551B827DA74F3060BE52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1389
Signing time: Mon 28 Jul 2025 22:00:16 +0000
Manifest this update: Mon 28 Jul 2025 22:00:16 +0000
Manifest next update: Tue 29 Jul 2025 22:00:16 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: HznEM8XHWkhTxhC5fY7qMPQT/UnrbIMt+qP7Ux1mmrs=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:fc:16:20:85:51:b8:27:da:74:f3:06:0b:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jul 28 22:00:16 2025 GMT
Not After : Jul 29 22:00:16 2025 GMT
Subject: CN=ec50ab90839f7a53bce22847b255302893b64753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:48:d6:e2:de:a3:3f:9f:82:d4:54:c5:13:
76:47:11:4b:fb:aa:5e:2d:61:70:55:6e:35:f9:53:
56:55:ce:a6:73:b3:c4:7c:cf:71:59:2c:0f:2a:21:
f9:4e:9f:e9:55:cc:a8:f5:22:ab:f5:08:91:a2:33:
2a:8e:4f:49:3b:7f:68:3e:bb:a0:bb:a4:dc:60:ae:
ed:3b:8c:6d:56:33:ba:1b:97:17:32:e2:6d:e6:08:
95:65:97:3b:a8:3a:2a:6c:b8:07:2f:e6:4b:d1:c0:
1b:69:f3:8d:22:5a:d9:88:27:72:34:23:f3:0b:76:
a1:72:36:bd:93:79:34:4a:59:03:15:6e:e5:95:d7:
08:56:42:35:2f:61:9e:55:ed:e4:cc:7d:1d:d3:3f:
f0:7d:00:e7:31:64:14:be:d0:63:92:5f:82:79:bc:
60:b8:22:ab:59:8a:dc:9d:a3:42:93:94:81:31:f1:
e2:05:8a:75:b3:f9:74:17:ad:d1:20:4a:2a:86:fe:
9b:4e:f7:b1:21:e0:c2:dc:7c:62:90:80:0e:78:28:
e2:e2:db:26:4f:34:1e:06:e5:6a:a9:df:50:37:e3:
a6:32:12:50:a3:19:ce:9f:c7:ce:0c:24:2d:20:72:
1a:1a:f1:7d:be:2d:38:fd:51:52:4a:e9:66:de:fa:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:AB:90:83:9F:7A:53:BC:E2:28:47:B2:55:30:28:93:B6:47:53
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8a:d6:bc:0b:b8:41:34:d2:db:f1:d3:4e:49:ea:06:d1:11:
a2:49:a7:60:d9:e3:de:99:b9:75:f9:77:ed:1c:75:97:a0:59:
97:7a:77:2f:74:1b:73:27:cf:fa:b2:a6:56:ec:94:00:2f:0f:
3e:7f:7c:51:45:47:7e:d9:52:75:29:cb:6a:d4:f6:c2:c1:8d:
67:fb:50:48:19:30:ca:8b:cf:eb:85:ac:dc:30:3a:e7:c2:20:
67:f8:7e:d1:52:7a:24:a1:b9:4d:7e:2b:42:69:47:62:44:c9:
ea:cf:f4:fb:16:f1:8c:d0:3d:98:c0:fd:cb:ac:2a:7f:1f:89:
3c:05:9d:cc:0e:a5:a0:e8:63:c4:e4:06:2a:73:d2:48:8c:3d:
2a:1b:89:7e:f7:a2:f1:f5:7c:49:24:d6:f8:40:42:31:0c:8f:
b8:62:2e:b6:dc:31:8b:9e:de:71:3e:96:51:74:e8:c2:b6:5e:
f4:36:c6:5d:bb:76:81:0a:51:c2:17:10:34:81:c5:ac:40:fa:
04:de:05:42:d7:4e:90:bb:25:38:67:b9:44:bc:a3:80:3f:13:
a8:d4:64:e9:8c:c8:99:26:b4:b8:d2:75:34:19:e3:92:58:73:
f1:ce:0a:88:ba:7d:5b:71:ed:d4:59:81:f8:85:a4:a7:0f:0b:
75:58:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:27 2025 by rpki-client