Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: zY9YzDXw2K4ovlCM3o+1vFBJi9zEG4+EOSuT82ZoCho=
Subject key identifier: 50:C3:B2:B9:AF:98:E0:A5:6C:1A:4A:F3:46:C8:A2:2B:9B:DD:A2:06
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 0198499BF7872C9DBE7943A1516D411F7E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 02:00:14 +0000
Manifest this update: Sun 27 Jul 2025 02:00:14 +0000
Manifest next update: Mon 28 Jul 2025 02:00:14 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: K41aoZ1cJ745zAAV8HY/fXhTEp9Zm2BO7D5JQ6aN/VI=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f7:87:2c:9d:be:79:43:a1:51:6d:41:1f:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Jul 27 02:00:14 2025 GMT
Not After : Jul 28 02:00:14 2025 GMT
Subject: CN=50c3b2b9af98e0a56c1a4af346c8a22b9bdda206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:3f:39:41:49:71:54:35:e7:6e:3c:d3:0e:
d6:2c:60:47:64:5b:51:5d:cc:bf:24:03:7d:5b:73:
d2:63:ab:ba:7d:37:42:63:29:e1:43:fd:4b:ef:17:
d8:75:64:1a:7c:84:98:45:09:15:32:c1:5b:70:4a:
30:bf:a0:26:2c:23:98:a6:a6:b0:59:89:b8:0d:40:
b2:f9:c9:19:56:dc:d2:aa:1a:5f:a3:4e:3a:6f:41:
78:21:17:27:35:8f:35:ba:d9:10:ef:61:dd:9d:68:
22:1d:d3:2d:6a:cc:cf:95:9d:c4:8b:62:bc:41:c1:
7f:5f:82:ac:58:56:94:24:06:5e:76:4a:49:ef:e7:
4d:e6:8a:39:41:94:f7:fe:71:03:12:92:b7:91:f0:
0e:a2:da:67:77:ec:58:92:45:3f:20:55:29:c6:35:
f6:86:6c:ba:a8:1d:bb:80:88:a2:84:3a:2a:c4:2d:
17:97:b3:be:e6:a1:a3:97:ba:3d:20:d7:7d:61:56:
18:7a:e7:22:0b:74:cf:91:4e:4d:7a:ca:b9:21:00:
a5:39:af:09:3e:9e:75:86:18:c2:30:64:9b:10:76:
88:e9:a1:0a:02:b6:94:3b:b9:a2:0a:e1:8f:7d:59:
af:9b:66:26:dd:1f:90:81:87:a3:34:5a:a7:61:de:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:B2:B9:AF:98:E0:A5:6C:1A:4A:F3:46:C8:A2:2B:9B:DD:A2:06
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:79:ed:4c:5f:89:00:b5:98:57:b0:18:04:25:c6:c0:2d:
e5:13:59:0a:8b:e3:a1:2e:88:1d:27:9f:7e:48:ef:51:e0:82:
cd:3d:ed:32:39:27:97:7e:da:3d:e8:f2:c5:6c:d6:e7:be:c9:
24:71:43:cc:c7:e9:e4:47:f3:bd:67:07:c4:27:fa:d5:34:96:
15:79:c7:9a:58:e8:9b:23:4f:33:f9:76:3f:2c:19:18:95:00:
8b:b8:99:c8:b6:c1:6b:b4:cc:02:2f:67:11:c6:8c:e2:ed:19:
eb:6c:e8:76:3d:d7:37:e0:2e:e7:47:fa:79:e7:4f:df:9b:b6:
db:c3:a7:05:7a:fe:36:6d:2e:5c:ac:15:5e:f9:4e:ab:ac:91:
7b:d3:57:49:8f:cd:7d:4b:05:2d:b9:03:63:c2:0a:bc:0d:dd:
7f:2c:b1:fa:82:d5:0b:18:5a:82:71:26:51:ed:69:03:5b:a2:
e1:02:ea:b0:8d:e3:42:77:5b:2f:31:2f:3d:6e:89:82:f2:57:
f0:de:ee:68:2d:a7:3f:ed:f1:e3:c1:50:5b:1f:79:d1:2a:88:
2a:15:85:98:ab:7f:29:be:cc:c5:3a:e6:99:6f:4e:36:ac:b5:
df:77:c4:d3:c8:a5:c6:3f:73:67:46:39:7b:cd:38:2f:d1:29:
30:32:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:39 2025 by rpki-client