Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: hheK7sjaydZzBXs0hjFfnnJJY/XIjwsvuISOB2H02A8=
Subject key identifier: C8:EB:7F:A8:E4:C1:3C:22:71:DE:2D:3D:5F:1A:F9:5B:D7:C3:F8:81
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 0198556A40D2DD4491F76973A54D4151EE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 0244
Signing time: Tue 29 Jul 2025 09:01:23 +0000
Manifest this update: Tue 29 Jul 2025 09:01:23 +0000
Manifest next update: Wed 30 Jul 2025 09:01:23 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: t2EPl4GHTBM1IddvzJmeetyqiylrRXOdD9t8VzW7dnA=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:40:d2:dd:44:91:f7:69:73:a5:4d:41:51:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Jul 29 09:01:23 2025 GMT
Not After : Jul 30 09:01:23 2025 GMT
Subject: CN=c8eb7fa8e4c13c2271de2d3d5f1af95bd7c3f881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:75:e4:8a:a4:d1:82:5c:98:14:b8:8e:b6:
93:59:31:a2:83:a4:da:18:92:7d:04:7c:87:11:9d:
a4:45:db:27:80:e6:25:aa:3a:da:d8:8b:29:b4:d8:
fc:78:22:72:00:38:00:db:75:c8:58:0f:44:5b:6c:
9b:8f:23:86:d9:80:5a:0e:cc:ab:7c:55:2a:ef:e8:
8a:fb:3e:06:da:64:7e:9d:aa:e7:8a:a9:c3:da:6d:
ac:b6:8d:90:b5:1d:d6:4d:46:12:58:a2:f4:54:e1:
d3:12:34:d1:cf:9a:d0:73:a8:cb:3a:fa:13:33:05:
25:3c:12:03:63:c7:ff:3f:3b:d1:73:41:d7:f7:29:
6a:d4:30:82:5b:20:32:b0:60:f6:b2:b5:1c:7a:c4:
bf:21:a5:d6:a7:e2:91:f8:83:9b:3e:06:e8:f2:6f:
62:3e:b9:1c:17:c2:c6:1d:e8:23:90:c7:e0:bb:61:
92:fe:b8:74:99:11:3a:66:8f:b5:b8:43:f3:dc:4e:
92:6b:a2:0d:3e:c5:46:f8:63:80:84:58:c2:9a:23:
5c:3e:e4:5a:41:2d:7f:a0:7f:cc:2e:54:cc:7d:48:
33:13:b3:72:d5:d0:7b:a0:6c:45:3e:c3:be:f0:59:
cf:2a:26:30:48:16:14:3b:2e:0a:b6:8c:d7:ee:d3:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:7F:A8:E4:C1:3C:22:71:DE:2D:3D:5F:1A:F9:5B:D7:C3:F8:81
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:b5:83:36:6c:ce:d0:b9:20:e9:5e:fd:69:3a:2f:54:bc:
02:4b:44:31:50:7a:2f:95:a2:ad:2d:61:5f:2f:44:0d:a9:a5:
21:be:dd:bb:fe:fe:92:68:64:43:f9:c7:7b:08:86:fc:df:38:
2c:fb:bb:4d:9b:44:22:ae:e1:16:1e:39:39:07:f4:04:08:39:
c3:82:e9:34:43:2b:a4:4f:d5:4b:77:c0:b4:3d:ff:75:44:20:
4d:6a:0b:82:ab:7c:ca:c8:1f:5b:e9:a0:f1:94:79:fb:5e:55:
6d:8f:19:f7:1f:78:b4:4c:40:45:d8:19:32:bb:7c:b7:5d:dd:
fa:d2:fb:be:9b:80:38:18:13:6f:d1:77:2b:8f:5a:27:f0:42:
31:b2:1d:81:d6:aa:5a:af:4f:f7:0f:2e:dc:66:b6:1d:9c:62:
59:99:37:40:b5:f8:6d:a0:56:74:56:f3:25:bd:74:00:86:db:
8b:6d:87:01:82:4c:79:be:42:54:72:7e:54:31:c4:98:33:dd:
1d:a3:6a:04:23:ef:1a:12:7f:48:ec:94:82:4e:b8:38:1e:d8:
f9:84:b5:28:bf:ea:c7:a5:52:75:63:a9:bc:46:4f:a4:cb:94:
19:a1:ef:51:49:b8:fc:72:c0:e1:b8:04:00:23:da:f5:c5:37:
7f:5b:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:57 2025 by rpki-client