Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: khjiaOKjnfR/ENtSLjk13c5nMjs+RgYqqicQURAgAXs=
Subject key identifier: 38:C5:B0:A5:47:E2:BD:93:3E:2A:BA:6B:99:69:A5:6B:B3:AB:6A:C0
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 019938DE5D85F9BE577FE7B91DAE21B9EEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 09D7
Signing time: Thu 11 Sep 2025 13:02:00 +0000
Manifest this update: Thu 11 Sep 2025 13:02:00 +0000
Manifest next update: Fri 12 Sep 2025 13:02:00 +0000
Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: unW7LcJeVF5yJvo0O6+q6L04cJc/+u4Jp0xDMd12Jtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:5d:85:f9:be:57:7f:e7:b9:1d:ae:21:b9:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Sep 11 13:02:00 2025 GMT
Not After : Sep 12 13:02:00 2025 GMT
Subject: CN=38c5b0a547e2bd933e2aba6b9969a56bb3ab6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:9a:c5:05:b4:79:e4:7a:24:58:68:d7:d4:
7e:11:ec:a7:40:c6:e8:18:b4:04:30:21:40:4f:21:
32:a1:4c:09:56:e0:4a:0c:2b:94:42:c3:08:cc:8e:
73:89:f4:4b:b8:0e:60:81:e6:be:12:4e:f1:bd:e2:
47:54:85:83:ce:46:03:38:fe:84:43:ee:76:0d:aa:
14:04:08:de:e7:eb:fc:9d:d9:36:0f:ed:09:c1:3d:
2c:7c:df:a3:84:96:2b:af:c9:36:01:3a:e8:81:72:
38:1f:55:ed:f9:47:f7:69:51:ac:5a:c6:90:f7:85:
b8:6f:90:a2:8f:65:bb:0a:ed:9b:d8:95:20:78:8a:
22:f5:94:87:58:fb:8d:69:06:01:3a:85:ce:8f:1d:
4f:93:82:76:cc:8f:bd:a7:38:d5:22:ba:dd:d7:2d:
c0:1b:a8:74:72:9d:1b:ba:3d:25:f1:cf:13:d0:5b:
f9:9f:a9:89:d2:19:ec:2f:ef:b0:2b:44:96:57:82:
15:40:4f:00:02:57:2f:c5:10:70:09:07:9f:ec:b0:
65:97:33:31:6c:cb:29:79:f6:be:6b:79:e8:f5:55:
19:14:ec:ba:bf:29:6e:f7:d8:55:fb:77:3c:a9:a0:
19:0e:2d:4d:39:90:ea:dd:72:57:27:5a:7a:ec:51:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:B0:A5:47:E2:BD:93:3E:2A:BA:6B:99:69:A5:6B:B3:AB:6A:C0
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:9e:8e:5b:71:84:81:b7:33:70:61:e6:e0:63:3e:11:1c:
79:84:29:1d:d3:74:5a:6c:92:31:d6:f0:10:56:f1:7f:c5:71:
71:08:ec:1d:d6:ca:25:43:fd:fc:0d:2c:61:a7:9a:64:be:5d:
28:78:34:ea:5d:0c:c2:e5:c1:b8:9f:6d:46:2b:1f:a7:d6:c9:
0c:99:a5:7b:45:94:3b:23:db:22:eb:e4:d6:3f:20:eb:4c:4a:
70:98:59:d5:ef:62:42:cf:23:99:f0:cb:07:e7:d9:7b:65:3a:
17:db:e6:8d:b6:60:9a:46:78:db:8c:e1:d3:44:11:9d:4b:cc:
f7:27:d1:7c:ef:d5:96:bc:1f:74:0d:63:f4:96:1c:84:4e:6b:
f9:48:72:0b:25:80:23:76:2d:e7:ef:be:df:23:39:3e:1f:24:
79:f3:28:bc:17:23:5e:7b:ba:78:5b:0a:a2:b8:3c:97:2d:0a:
f7:67:9b:15:93:39:d0:aa:65:c9:ae:4b:98:46:a3:2d:d7:c8:
73:75:65:99:a1:f8:a2:46:b8:74:7e:02:ad:3c:5c:d2:f4:01:
7b:a3:8d:5c:4e:b6:ef:2f:ec:b4:ba:bb:c9:75:bf:5c:1f:38:
f7:26:0b:55:6a:e0:98:87:a8:4d:0d:fa:bf:af:44:1b:03:ae:
db:ab:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:25:26 2025 by rpki-client