Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: eId5ugwCEEwlQsQUWeooUWLsjYabp362hO2fbyPYOkk=
Subject key identifier: DF:48:5B:90:5A:AE:B5:BA:75:14:72:5F:C5:E8:89:EF:08:6E:0B:7A
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 019844ACAD8D9A0D63C35F5E21991D7E9AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 03:00:23 +0000
Manifest this update: Sat 26 Jul 2025 03:00:23 +0000
Manifest next update: Sun 27 Jul 2025 03:00:23 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: NPRLlx1ITugAD10Nyy9PDSJsoGUit9t78Eif3ThHwuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:ad:8d:9a:0d:63:c3:5f:5e:21:99:1d:7e:9a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Jul 26 03:00:23 2025 GMT
Not After : Jul 27 03:00:23 2025 GMT
Subject: CN=df485b905aaeb5ba7514725fc5e889ef086e0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:36:92:e5:ef:31:77:0c:89:09:88:20:ed:
79:9d:c4:96:e3:11:43:a4:0e:e5:81:da:d8:a9:37:
60:17:28:08:4c:bb:34:47:8a:1f:9b:f8:37:79:4a:
78:20:5a:0b:0f:93:0f:03:46:b9:6d:38:dc:f9:a0:
da:8d:93:ce:ef:c5:09:6f:6b:1a:b9:60:e6:c6:4c:
64:ea:a4:72:93:bf:40:8d:12:fa:10:b4:80:88:e6:
c8:69:d4:a8:1f:91:e2:26:82:63:35:c5:23:d9:a7:
32:c2:60:10:59:35:de:11:0b:3a:f5:9e:c0:68:84:
11:8e:cc:dc:02:88:29:98:a3:39:ec:dc:1c:8b:a3:
15:58:80:6c:2f:2c:14:b8:3b:14:82:67:d6:ce:1c:
5e:04:73:cd:64:da:d3:78:aa:f5:1d:6e:33:3f:7a:
1e:3c:11:22:ed:2e:41:12:5b:96:b8:f3:4b:02:a3:
88:1b:f5:f1:05:23:9c:ab:04:b3:d8:2e:0e:63:a9:
c2:9f:7b:7d:4d:31:20:2c:c9:5a:3b:69:e6:d5:69:
b0:c5:41:7d:a3:72:9c:24:90:1b:4f:3d:62:53:fb:
ba:00:7d:27:3b:64:a6:f3:a3:32:8f:73:e5:56:c1:
6f:d9:7c:bd:c4:9f:bd:c5:6f:03:45:f3:3d:e1:a8:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:48:5B:90:5A:AE:B5:BA:75:14:72:5F:C5:E8:89:EF:08:6E:0B:7A
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:f5:35:ba:3c:47:7e:94:87:85:23:7a:bc:8e:9f:bb:72:7b:
00:2c:33:92:d6:c1:4c:c4:ca:31:54:df:ee:af:77:cf:8e:85:
41:32:b6:78:cf:be:cc:5d:9d:3e:40:c7:45:a0:b8:aa:09:43:
aa:3a:77:8c:62:c4:8f:1e:96:0e:8e:8d:81:37:78:bb:7c:a2:
8e:98:1e:2d:24:c0:29:7c:ac:df:62:35:a6:72:ba:19:1a:dd:
d8:49:5d:56:16:4e:35:31:21:8e:26:12:a6:a1:59:45:00:c1:
10:57:8a:15:78:41:10:8b:9d:ab:51:a1:82:43:11:8d:36:41:
cc:94:6e:1b:a5:29:da:2b:33:f5:9f:60:a8:01:0b:24:b1:e2:
40:fb:63:fb:69:6c:0f:66:18:59:cc:ac:47:ab:f2:cd:25:da:
fd:14:5c:2e:c4:ce:cd:2b:fd:9e:e8:d6:8c:35:ea:e2:a4:e7:
67:3c:23:3e:ee:86:16:6d:c1:b7:df:9b:cc:20:f2:da:6f:d6:
09:0a:f9:06:d6:15:b9:12:ac:cc:35:9f:ab:ca:f2:ab:cd:8d:
0f:30:8c:3c:fa:93:9c:03:77:60:e6:d0:a8:6f:22:ed:62:56:
7f:d4:ed:46:bb:cb:17:69:65:77:24:48:1d:41:bc:21:2e:e1:
8e:aa:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:02 2025 by rpki-client