Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: 0/ez2EslGDAKOwgHmzLs9XVBUe2NldruvUgSXe074zI=
Subject key identifier: 31:AF:E5:C6:94:A4:41:15:99:5A:39:58:13:76:F1:E2:18:86:C7:0E
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019848C05158234B3CE764A381B8B3038ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 03C4
Signing time: Sat 26 Jul 2025 22:00:19 +0000
Manifest this update: Sat 26 Jul 2025 22:00:19 +0000
Manifest next update: Sun 27 Jul 2025 22:00:19 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: mg5+IDex0fpUpvtePirlt1H/PHVnBA5BXkf6dy1YpAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:51:58:23:4b:3c:e7:64:a3:81:b8:b3:03:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Jul 26 22:00:19 2025 GMT
Not After : Jul 27 22:00:19 2025 GMT
Subject: CN=31afe5c694a44115995a39581376f1e21886c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:32:f3:8c:a9:60:f1:b6:cb:91:7e:82:ad:
f3:fe:22:49:3f:ab:47:bb:12:56:9d:40:45:1e:1a:
04:69:da:44:81:ad:89:50:10:41:5a:80:36:2a:03:
99:a0:60:90:cf:46:56:8e:29:74:20:4b:5e:8c:e5:
fe:bb:43:e2:14:46:c6:75:7e:2f:e0:0a:77:3e:74:
53:15:9d:d4:51:30:d2:3e:eb:ee:cf:5e:65:52:aa:
22:6e:0d:39:18:29:0e:72:82:76:00:a4:d9:07:0b:
01:b3:1c:b7:8b:81:d4:80:eb:fe:3f:89:4d:19:7e:
92:63:40:01:86:22:eb:2a:9a:6e:53:c6:e4:4f:bf:
a6:27:91:7d:53:0f:4c:e3:1a:9c:07:3c:a5:fb:fe:
21:c6:8a:93:06:c5:f0:4d:1b:bc:84:19:6b:33:cd:
76:ba:02:ae:f4:6c:05:8b:bd:77:0d:be:31:a5:59:
5c:d9:e9:0b:be:70:33:82:da:44:52:8f:0a:cf:90:
71:ae:a8:43:20:6c:31:6e:3d:c8:3c:61:74:f2:6a:
54:0e:14:f3:fd:5f:2c:e0:56:8d:7a:f2:a7:c2:52:
19:28:16:96:24:00:80:1e:05:70:69:08:80:7a:d4:
15:dc:da:a2:e1:45:e6:f6:f5:e8:80:9f:fd:72:33:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:E5:C6:94:A4:41:15:99:5A:39:58:13:76:F1:E2:18:86:C7:0E
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:68:ad:f2:c9:ed:fb:33:f7:33:7b:cd:d2:97:db:03:f7:
a2:f5:92:19:d6:e5:d5:09:37:b6:65:6a:5d:28:89:33:d2:33:
9c:9a:b6:9c:63:ce:4f:aa:aa:cb:3c:a3:5e:d7:ba:db:a7:7d:
29:2e:f9:07:76:da:00:57:cd:ef:47:31:2c:3d:15:db:a3:3d:
87:17:c2:fb:56:6b:73:c8:bb:55:73:a3:40:21:75:7f:7f:3b:
6a:be:15:47:70:87:f3:22:af:a6:69:12:d7:41:c7:1f:77:09:
80:c0:5f:90:27:0e:99:c6:e9:3e:38:99:4c:76:c9:3c:64:26:
78:9f:66:29:2f:3c:73:5e:af:6a:2e:49:18:ea:e0:b1:b3:55:
70:c2:1b:d1:e3:e4:1f:fc:28:93:5d:fe:68:05:13:fe:e3:88:
65:07:43:81:f6:4a:11:9d:5d:de:2e:15:d7:84:da:81:71:62:
cd:b8:7d:20:e6:3d:bb:99:24:b8:fa:b0:3f:9c:c2:89:89:5b:
21:d6:33:20:17:6e:78:16:6f:ac:df:ed:40:84:df:7a:3c:85:
ef:0c:63:1e:89:e8:ee:36:86:66:b8:99:0d:20:51:85:89:ff:
d4:40:5e:a6:14:a4:00:c5:0f:c6:47:fb:cc:76:88:58:d1:f4:
d6:6a:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:35 2025 by rpki-client