Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: hSFf9K8CYVFVwjITNfLmwrQ0VN7PlgEtcZUejzUytTk=
Subject key identifier: 7D:49:AB:70:6D:F9:44:28:C8:11:A8:9E:EC:A0:47:F8:5B:23:26:30
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0198530D3B80381025319864E1A8456BD273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:00:32 +0000
Manifest this update: Mon 28 Jul 2025 22:00:32 +0000
Manifest next update: Tue 29 Jul 2025 22:00:32 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: J1IkBJ5IGz63PqDQfRzv8KmUTyrnDlOZT+AwQju5j2Y=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:3b:80:38:10:25:31:98:64:e1:a8:45:6b:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jul 28 22:00:32 2025 GMT
Not After : Jul 29 22:00:32 2025 GMT
Subject: CN=7d49ab706df94428c811a89eeca047f85b232630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:66:97:dc:89:9d:bc:ee:1e:8e:64:61:9f:
9f:f4:55:6b:39:f3:3a:65:0b:37:75:ed:81:ea:96:
15:c1:0d:c9:c7:5b:64:e4:bf:05:f7:f7:ec:5e:25:
d6:16:ec:a1:b2:e8:20:f1:d2:28:64:25:7b:86:40:
bb:ca:01:ab:fd:ee:9f:02:f0:74:88:f1:fd:ef:ea:
58:67:1a:a4:99:29:8e:4e:e0:7e:26:81:a0:44:3a:
ff:b1:d8:5e:d6:4a:f9:be:11:34:a1:55:24:26:ab:
a9:2d:3a:0f:4d:23:a2:f5:e5:48:7c:d2:f4:73:7e:
03:97:51:0d:32:1d:93:a5:e8:b6:2a:37:f8:ba:9b:
27:e7:66:d4:a3:a3:4b:e1:e6:64:23:46:ac:6f:71:
fe:c1:2e:b1:13:82:07:41:ba:a5:93:13:75:f2:e3:
c6:b0:e7:7c:bb:84:30:6b:7f:bc:01:69:34:8a:95:
bc:3f:e4:87:02:84:0d:d8:4d:5c:7b:a4:9c:a7:07:
39:c9:7a:66:43:1e:55:f6:1c:82:54:41:4e:b2:a2:
6d:09:35:0c:aa:40:ca:e8:76:d9:76:9b:59:76:27:
6f:ae:a0:ce:13:97:4e:74:45:dc:45:50:7b:e5:3c:
50:c0:98:43:ba:a9:1b:e5:af:b0:f5:5a:02:c8:eb:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:AB:70:6D:F9:44:28:C8:11:A8:9E:EC:A0:47:F8:5B:23:26:30
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7d:d5:7c:df:c2:f0:0b:e2:b9:7c:53:b4:37:9a:ed:5f:c2:
3f:84:6a:ea:6d:96:c4:87:87:5f:ea:14:36:da:25:35:a0:bf:
9c:a5:6c:95:30:c5:7f:16:6e:00:64:3f:9c:77:40:19:c5:c3:
0b:18:53:52:b1:a8:c8:c9:13:61:d2:66:0c:5a:04:0b:5e:a7:
9c:94:61:8b:6e:fe:4b:74:04:5f:ea:74:8e:1f:bc:39:06:67:
e9:7b:99:62:d1:48:37:28:33:4e:42:fc:af:c1:70:c6:0e:f0:
f8:f1:e8:cf:33:29:e8:0d:40:8e:fe:64:44:a2:6e:08:3b:17:
62:6e:30:7e:17:67:14:d7:7e:f8:d6:7b:96:94:23:ff:19:d7:
4e:9d:df:ea:b4:f8:ff:e4:f3:2b:29:43:66:83:11:bb:32:d4:
0d:b8:bd:7a:34:cd:76:6a:b9:f6:41:85:62:f8:89:dc:fc:6c:
c7:48:f0:8a:b2:f7:b8:98:b4:42:04:8a:6e:ea:7d:56:c2:e1:
d5:0a:e8:f7:25:68:82:0b:12:20:bd:35:bd:b8:a7:7c:7c:59:
25:2a:21:2d:1e:15:3c:fe:30:59:b3:94:09:81:c5:72:a0:ed:
15:e8:eb:02:10:a6:9c:11:74:e0:6c:f8:f5:f8:eb:9b:66:2d:
6f:ea:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:59 2025 by rpki-client