Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: kDTmvQ2wXeZR1tA5+dnZZPrtsPHoTetDDCE2DJ2TCfQ=
Subject key identifier: D3:E3:F6:2C:F7:12:32:4B:12:EC:1A:5F:15:C9:BC:9B:C7:01:36:AD
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0198488986175FA3E35BA9F61C2662E801E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 21:00:29 +0000
Manifest this update: Sat 26 Jul 2025 21:00:29 +0000
Manifest next update: Sun 27 Jul 2025 21:00:29 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: aH5pomMwb62e0fsxf7EprSBnoltznIkyi386Fg17MZk=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:86:17:5f:a3:e3:5b:a9:f6:1c:26:62:e8:01:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jul 26 21:00:29 2025 GMT
Not After : Jul 27 21:00:29 2025 GMT
Subject: CN=d3e3f62cf712324b12ec1a5f15c9bc9bc70136ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:86:35:4d:5a:e4:c0:03:a7:ad:89:76:3a:
c3:6e:50:de:a7:b7:88:de:1a:06:77:2a:bd:c9:30:
b5:c4:0a:bb:fe:c9:26:e5:39:34:d6:57:1d:33:38:
08:24:60:b6:62:a1:2e:90:ff:af:53:4f:a6:68:60:
ff:3e:77:3b:d2:6c:40:87:8a:56:e6:f7:33:51:02:
c5:48:c6:dc:18:5e:e7:72:45:08:f9:21:e9:c2:b9:
1b:e3:b6:7e:70:2c:42:84:53:41:d0:5c:39:6a:14:
4e:92:86:d2:11:f8:49:39:18:29:9e:b9:6e:8c:6d:
fe:51:7a:77:f5:10:32:61:b7:b2:96:ef:e9:ae:71:
a8:93:46:04:a7:d0:b3:c8:21:3a:b1:5c:3e:a0:63:
ae:d7:bb:f2:38:c2:37:bc:92:8a:f5:4f:45:3b:88:
92:57:53:4f:2f:f0:8f:af:2d:27:1a:5c:16:cf:ff:
78:97:ff:c6:f2:4f:8e:01:a5:bd:81:a8:24:c4:14:
8c:44:17:2d:65:87:7e:f8:01:47:fa:f8:73:3a:ff:
98:32:3f:76:84:27:a3:b4:d0:03:5e:44:02:ac:73:
fb:1f:b1:b3:57:ab:c5:b8:0a:76:10:e3:74:17:92:
d1:e3:9d:55:03:92:03:cb:aa:7f:40:4b:89:3f:f1:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:F6:2C:F7:12:32:4B:12:EC:1A:5F:15:C9:BC:9B:C7:01:36:AD
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:6b:01:5a:61:cc:3d:2b:16:57:f3:07:5b:1f:4b:4e:e8:
93:47:09:fa:6f:c3:df:82:24:47:cd:29:ae:cc:40:79:db:7b:
b3:18:6d:c4:53:22:62:d8:59:02:7e:b9:ad:f8:8f:98:04:9e:
c2:b6:53:a3:0f:d4:a8:59:a3:e4:ea:14:51:2e:a1:57:2c:e4:
01:1d:f8:78:2b:a7:f6:5a:21:68:2f:2c:00:0f:82:ca:50:c5:
39:70:5d:81:86:64:42:ea:19:db:0a:57:91:a0:1a:80:86:db:
a7:c0:85:2a:65:17:9c:5a:38:44:78:84:c3:34:6e:61:28:4b:
09:88:10:63:da:1c:16:7a:81:27:18:04:0c:bb:66:02:bc:4e:
99:e9:81:1a:39:b1:f2:6e:8f:6e:3e:3a:fd:cb:d2:a1:d9:b0:
b7:36:92:e5:72:03:1f:79:d7:60:23:c6:f2:87:f4:a7:a4:c3:
b3:50:f9:55:52:eb:c5:ec:bd:ea:73:6f:d1:71:de:79:ff:dc:
70:21:73:7d:d7:fe:7f:02:39:81:53:2b:5d:2f:f1:bb:3b:2c:
71:42:eb:dd:3b:e6:b3:d9:33:ac:73:b2:52:f7:a0:e7:5b:12:
13:ea:42:c6:43:ce:44:c5:bb:a3:a1:13:72:e3:a2:7f:65:c7:
20:74:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:55 2025 by rpki-client