Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: kf5xiB+27RGXaj/LLhuICo8Bicnd2qg6M2E+NqFShJM=
Subject key identifier: 2B:BE:CD:23:7F:81:78:8A:E3:BA:D2:B0:9E:83:47:89:8F:14:7F:E8
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019853B24BE7CD9D25E9CAD8F17409C0B0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 14EE
Signing time: Tue 29 Jul 2025 01:00:50 +0000
Manifest this update: Tue 29 Jul 2025 01:00:50 +0000
Manifest next update: Wed 30 Jul 2025 01:00:50 +0000
Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: pUVlQOBdzv9sFQ8p7d8TPqwlvHKPMpg9y7i44ZI+Cug=)
2: VIlea1HGjGCn_MVKwJV926-pJjE.roa (hash: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:4b:e7:cd:9d:25:e9:ca:d8:f1:74:09:c0:b0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jul 29 01:00:50 2025 GMT
Not After : Jul 30 01:00:50 2025 GMT
Subject: CN=2bbecd237f81788ae3bad2b09e8347898f147fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3d:1d:69:84:b8:df:13:d2:e9:f4:f3:69:e7:
b1:4b:1d:db:99:88:0e:fc:13:b0:18:55:e1:4e:af:
1f:1d:40:92:95:39:18:68:00:93:14:52:ad:75:f4:
62:75:2e:58:62:7b:b1:b6:8f:c9:32:27:82:31:6f:
85:1c:ae:20:23:0b:9a:73:44:39:ce:6d:51:33:97:
7f:3c:8a:63:d4:ee:2c:6f:5e:1d:3f:fd:15:22:b8:
96:7a:9d:87:56:7b:28:72:f3:01:6d:d5:d3:cc:ca:
f5:e8:2e:01:21:a2:45:94:38:96:78:41:2f:ec:cf:
60:e1:2e:89:58:c3:7b:40:81:8f:90:36:f8:63:54:
8b:84:07:18:3d:4c:b5:8c:62:20:7b:20:9c:6f:59:
f4:1d:3a:9c:6d:1f:f4:86:b1:40:3c:de:d1:7c:76:
e0:a4:80:6e:80:01:f4:e7:8c:cc:a7:7c:a6:78:bc:
a8:25:b2:ec:1a:90:49:70:39:76:5b:05:e5:02:31:
b1:a3:c4:b8:1a:7f:75:06:aa:5a:56:49:77:e1:22:
fa:74:32:61:04:e9:79:4b:26:17:4e:ea:04:6e:73:
0e:22:c4:b4:63:c5:cc:03:e0:18:51:84:f2:11:df:
fc:33:55:15:dc:1d:c7:83:cd:cf:76:8e:e4:7c:77:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:CD:23:7F:81:78:8A:E3:BA:D2:B0:9E:83:47:89:8F:14:7F:E8
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:f7:49:9e:3a:11:18:f7:e9:f4:4b:b3:0e:5e:ab:59:03:
e2:ce:c4:79:58:03:ac:5d:74:00:a5:d3:c2:45:4a:93:44:30:
e9:9f:bc:e8:ef:d2:c9:d3:67:42:c7:48:87:d6:ce:7b:2a:69:
56:5e:44:d5:59:e9:c5:5e:b2:22:20:1e:f3:1c:ec:db:aa:6f:
4b:8e:4f:57:74:bb:cf:a2:2a:d5:8e:d0:13:6e:92:80:4f:71:
ce:f3:31:06:8b:41:f5:3b:e4:c1:b2:3b:1a:a8:7e:5c:84:07:
6e:8f:b3:4f:f0:51:c1:f5:2c:cc:a7:b3:b3:62:f3:31:de:e2:
88:df:93:f4:82:08:b9:71:11:20:d9:4f:b2:86:ec:4a:fa:bd:
fb:54:22:59:b5:1f:58:b6:4f:74:f6:fe:1e:c7:57:4b:4c:7a:
f1:8b:08:e4:8d:e9:f3:83:e3:c1:5b:f6:bd:7a:3e:16:1d:34:
67:ef:e0:e3:6f:03:04:e7:be:1d:1d:3c:33:d4:99:c7:96:ab:
d9:64:8d:e1:28:c9:e6:80:a3:d1:61:3f:7b:bf:c6:0f:a9:f7:
d4:ab:6a:ef:7b:60:27:5a:47:c8:1e:d3:fd:27:12:9f:bd:5f:
d9:9b:dc:21:d4:3f:a9:86:75:ef:ac:3b:b5:9f:d2:41:8f:c4:
79:27:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:37 2025 by rpki-client