Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: clSFtMXQEmisqyvBtrjvGdaZRKWEt+jGqQBl1rzEZeU=
Subject key identifier: 57:41:E4:3A:0C:8A:1F:30:50:DA:18:BD:87:C0:AE:11:D2:1C:67:0C
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019826A26728383B4559FBCB55289FD38ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 0F
Signing time: Sun 20 Jul 2025 07:00:34 +0000
Manifest this update: Sun 20 Jul 2025 07:00:34 +0000
Manifest next update: Mon 21 Jul 2025 07:00:34 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: VxaZIqQZJYcjy86uWGHOvHjOhzIRuxUylTyuAOY7nck=)
2: vGkLbSDH1uJpYJ7xzGoQmZeUqxg.roa (hash: 2OV0rpyTFmg8lfpImi7TfQmWayywKrEbAhbjG35gI2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:67:28:38:3b:45:59:fb:cb:55:28:9f:d3:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Jul 20 07:00:34 2025 GMT
Not After : Jul 21 07:00:34 2025 GMT
Subject: CN=5741e43a0c8a1f3050da18bd87c0ae11d21c670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:05:1f:94:6c:b2:ad:8f:93:bf:ab:e5:5b:
d0:ec:e6:d0:9b:61:33:0a:61:fe:a5:39:e4:d4:f0:
80:ba:87:5c:fb:14:b2:d9:66:87:81:39:92:a6:fc:
bc:a8:c1:52:b2:c2:83:80:ee:ec:34:6b:3d:0f:d9:
a9:6f:da:2a:1b:8e:10:84:cd:3e:44:f2:f3:5a:e7:
29:b6:55:ed:ed:2a:38:1c:15:bb:4e:21:5c:01:c5:
44:5d:6c:27:dc:ef:c6:80:4f:e7:4c:c8:91:f4:7e:
09:66:c7:09:d7:e3:74:c2:de:75:31:c9:d5:98:03:
29:7a:fb:df:a7:33:e1:44:ed:a8:81:3c:7d:db:d6:
16:a1:c6:9e:3f:f9:3b:ef:d4:6c:e2:18:14:c7:c0:
15:40:94:80:01:21:60:e4:ab:25:f9:6d:4b:79:43:
c0:5d:f5:c6:91:b8:59:1b:7c:45:33:67:d5:e4:19:
c9:a3:55:20:71:44:16:2f:51:af:b1:7e:6d:ff:35:
f0:6b:e5:63:ad:15:f1:e1:53:a5:25:f0:bb:42:8c:
08:ac:a1:01:ad:01:6d:b1:95:b6:65:64:90:d4:9c:
cc:11:34:37:9f:94:62:2c:5f:a9:f5:07:0c:2a:28:
05:21:2a:b5:80:97:36:8d:eb:dc:d4:4a:ef:ac:54:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:E4:3A:0C:8A:1F:30:50:DA:18:BD:87:C0:AE:11:D2:1C:67:0C
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:70:b3:36:09:74:eb:fc:60:47:b2:0c:82:27:c4:20:8c:
c5:0d:28:80:ab:c8:0c:9d:6f:ae:c7:53:0e:fe:09:5f:c7:6a:
ab:b1:8e:62:a0:da:0d:0e:38:75:cf:eb:d6:18:2a:3a:a2:de:
e6:be:e7:f9:21:20:d2:01:72:94:59:0e:44:14:1c:26:a1:f8:
ab:57:f3:ef:2c:a9:4b:31:83:d7:8c:28:92:a6:69:1d:e1:ae:
46:17:ae:b2:f6:d1:74:55:3a:fa:26:fe:81:45:0b:ca:d0:3f:
5d:ad:f8:32:be:a3:9d:2d:6b:7b:44:c8:d7:9e:a0:69:b7:0b:
4a:29:06:e2:12:5b:8c:56:97:9c:b3:6a:4d:0c:55:70:1f:48:
89:93:01:32:56:31:4e:bd:92:c8:7a:e7:f1:3b:17:48:d4:3a:
6d:aa:a6:21:f7:7a:09:f7:11:b2:ec:7b:ff:a2:2b:0c:6c:7c:
8d:17:5b:f6:01:92:e4:44:c1:ab:4c:ca:9b:8b:57:b9:5d:fe:
9f:e7:1b:d3:72:8b:03:19:3a:36:12:61:96:64:37:cc:cc:c0:
9f:1d:63:64:25:31:fe:51:ad:44:19:fb:a0:e5:5e:84:da:de:
e1:d5:55:09:1f:66:36:a8:ae:00:70:94:89:fb:07:44:bf:85:
0f:c4:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:31 2025 by rpki-client