
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: bsA4dWgGXqqtw491zYd1FqdXfP+q1a0u2U07liUvOYE=
Subject key identifier: 0E:97:65:5A:B1:6E:90:85:B6:F3:42:F7:7C:83:1C:F2:25:E7:E0:1F
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 01984AAEE07317E06B1AC670B17B6CBD8374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0CB7
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: SftEyg/UyanY9b3y+eWmq1ymGPTEh3Vvm4RNlhXzKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e0:73:17:e0:6b:1a:c6:70:b1:7b:6c:bd:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=0e97655ab16e9085b6f342f77c831cf225e7e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:d9:e2:e4:54:7b:a9:1b:92:88:04:e3:65:
a3:03:fd:3a:c4:6a:a7:5c:69:e1:d2:1c:a4:1d:c7:
e6:5f:71:43:47:e7:05:02:9d:91:f7:d2:f3:8c:45:
77:5c:1b:a2:b0:95:9c:a7:8d:3e:d4:35:94:ca:63:
0d:e8:a3:45:5e:2a:cf:d6:a9:57:0d:a0:32:85:9c:
d0:4d:1b:c7:f6:37:ee:29:34:a2:cf:4d:b2:da:b7:
8b:ae:1b:70:39:67:57:72:c5:4b:db:bf:c6:6e:8e:
5e:c5:b9:56:6c:83:ed:d8:5a:44:4e:36:87:b8:5d:
3c:0b:eb:b5:17:c8:0b:52:3e:bb:d4:e1:ad:b2:24:
64:59:87:ff:3a:cc:98:63:5d:08:d6:22:75:7d:58:
fd:91:62:29:6c:3b:61:48:be:d8:c2:6b:a7:9b:07:
9a:26:72:ee:b2:97:21:48:82:f8:1a:49:2d:12:05:
82:41:20:0d:26:52:53:7b:3b:7f:dd:50:1a:f1:24:
79:59:59:cf:88:84:21:ef:d0:26:ad:d9:8b:b8:5d:
7f:2a:53:69:32:b1:81:61:e5:12:fa:f7:a6:fb:2f:
1b:b7:08:07:e4:1f:e9:f2:16:08:58:8d:e2:aa:ff:
08:57:3e:87:af:f4:bc:d8:e1:7a:dd:3b:48:e8:49:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:65:5A:B1:6E:90:85:B6:F3:42:F7:7C:83:1C:F2:25:E7:E0:1F
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:37:ac:fd:36:d0:4e:7d:ee:52:17:94:16:8c:00:97:88:
d7:6e:90:3a:8d:df:12:f9:5b:54:10:59:38:51:9b:6b:f2:e2:
56:82:84:48:32:d6:a2:23:45:33:40:be:c9:e3:c8:31:f5:91:
5d:92:af:ea:bd:ff:b2:c4:16:e7:90:db:87:63:48:bb:18:e2:
63:56:6c:9e:8a:02:36:03:e1:f1:02:ba:6a:81:29:8f:46:85:
1c:c5:e9:57:db:55:3a:12:c8:de:a7:d3:ef:a4:7e:84:ea:7b:
00:de:06:e8:32:f5:fd:23:9d:74:b3:02:a9:03:f6:1d:9c:05:
bd:bc:d8:6c:78:a2:1e:7e:22:c4:e9:86:85:49:68:f5:51:36:
a3:fe:a4:36:8f:04:3d:13:9f:10:78:1d:10:45:7c:07:8b:1d:
e5:90:3e:4a:0f:d5:bc:74:c9:43:ae:5a:19:97:02:3f:0a:ea:
ba:4e:dc:2a:95:81:1d:0e:44:ec:3d:44:48:75:85:d0:b6:3c:
c6:ec:eb:ff:aa:c2:23:a9:9c:cb:63:58:04:3b:53:0e:47:63:
3e:a8:5f:3d:7e:90:99:b2:67:40:60:9f:38:30:cc:73:88:87:
f1:c0:31:cb:1d:8a:7c:80:10:18:cb:32:5b:e9:30:19:2c:0d:
7a:9f:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:45 2025 by rpki-client