Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: ZD/sgZT3fPW3nTq1+sI/HazaXfpQ8R67LhnrMUhXrZU=
Subject key identifier: B6:BB:F2:1B:8E:D9:AE:A3:36:34:9D:C9:A2:96:92:6E:A9:BC:F8:FF
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 01984965A0B3C64CCCC0BFB84A4E9D40DAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: 37GvZ07Bs9ALM-UjthgHQEKF0y8.roa (hash: pSoIBelVOfgMsL7bvPvm9KNh08Z3vU+jb3PDyOFmyw4=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: MBlVsQ8cfnLQREONT6SB0CjC8vyMIUSfSXk6AQOoGMY=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a0:b3:c6:4c:cc:c0:bf:b8:4a:4e:9d:40:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=b6bbf21b8ed9aea336349dc9a296926ea9bcf8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:9d:f3:21:8f:15:b4:61:61:ec:51:38:bc:
61:c3:7c:e7:78:91:25:2f:40:9f:d2:13:81:dd:4a:
b1:eb:32:4d:9d:e6:c8:26:8d:74:22:59:44:a8:4e:
67:7e:48:bd:d3:19:e1:59:a5:8e:12:c7:28:24:4b:
a8:8d:08:2e:d8:e9:86:7e:2d:d4:0d:d7:bf:1b:37:
0d:bd:13:a4:64:3c:f2:95:e4:33:66:15:8b:a9:e3:
d5:a9:37:a2:f7:96:c9:48:08:ab:e1:20:a6:28:83:
f3:a5:50:e1:6f:2f:c6:18:7f:66:cf:e4:76:d0:78:
e7:fa:ef:05:72:b4:62:5b:51:44:af:b0:48:ae:f8:
1b:c1:04:87:cc:2a:c5:21:b6:87:a9:19:b8:9b:fb:
f7:f8:df:89:96:a4:e3:47:3e:11:97:80:ba:61:27:
66:2d:34:95:9c:46:7a:f2:88:6f:fb:2d:ec:ab:12:
a5:cb:e9:7e:44:6b:6a:b7:65:ac:25:b3:02:23:74:
c6:b4:bb:5a:80:8d:fa:25:9e:00:32:7e:ef:3c:2e:
be:60:ff:a7:13:7d:38:75:34:ec:bc:9b:ef:1c:e4:
c6:9c:93:a0:ea:ff:c9:6b:21:c2:06:bc:15:44:13:
78:c6:46:38:ca:85:da:80:7a:30:e1:d1:ff:be:3f:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BB:F2:1B:8E:D9:AE:A3:36:34:9D:C9:A2:96:92:6E:A9:BC:F8:FF
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c1:da:eb:7d:eb:dd:c2:a8:2b:66:9e:12:18:da:1a:2f:a5:
9e:3e:8b:dc:a4:e4:dc:3d:5a:54:24:95:25:f4:3f:a7:de:d4:
2c:ae:b9:c5:ad:3e:63:87:1b:95:cf:38:aa:70:07:3d:fc:f9:
a1:85:55:b4:5d:7e:29:a8:ef:ef:14:5b:03:92:8c:af:0c:1c:
b2:8c:25:9a:82:8b:49:d3:f3:f5:ca:2f:24:7c:73:c9:b0:7f:
15:4a:54:82:3c:10:54:83:cb:b4:e2:d1:91:3a:e6:7a:f2:20:
12:45:71:79:c5:45:24:7d:ff:de:a5:d8:42:93:f7:70:ff:ee:
a0:c6:3a:92:53:ee:ae:a8:8e:09:d9:40:02:32:9e:df:40:5c:
86:26:86:d6:82:96:33:3a:97:d5:ea:da:57:90:11:03:65:13:
b9:d5:35:2c:2f:c4:34:47:e3:10:98:ec:0b:9b:50:75:9e:fc:
2c:d1:e9:0b:04:7c:e9:97:d5:74:52:e4:b7:c9:61:57:d1:db:
fc:01:90:52:86:75:75:2e:55:16:86:49:a2:69:6d:48:8e:44:
18:50:39:b5:0c:34:44:37:73:24:e3:fb:d7:79:56:c6:31:a9:
b3:74:29:f4:d0:a4:c1:b0:80:1e:a8:d5:07:56:69:8b:b3:25:
3b:d0:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:51 2025 by rpki-client