Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: 7Fvu+JoyPWnOAQ9SvTM1ANj9pi5nUUiapeNxZCk6AT4=
Subject key identifier: 11:71:18:54:5D:64:83:A2:F3:3E:D1:A4:95:21:27:D2:F8:9E:9B:B8
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 0198CB37546BDF379FA4D27E05F7BA7E7C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 0DE0
Signing time: Thu 21 Aug 2025 06:00:57 +0000
Manifest this update: Thu 21 Aug 2025 06:00:57 +0000
Manifest next update: Fri 22 Aug 2025 06:00:57 +0000
Files and hashes: 1: E8pnZAwdco6rqZPYbTvktaE1H_E.roa (hash: mJU1Xr9YV7h0pCMVQKe6h9rLN6ylm3PlXlO/99QSzGM=)
2: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: yYpOpyC7viW/NHHQZWhlOQk/81cnZSNrMWRLn/C1EYQ=)
3: PosgbjBEN3JIZPm6yklNyzwEmB8.roa (hash: LxPaPYdBVWlHlKrzs8JwxQbkpaWJXSY0yo3gaOhFHFk=)
4: iYqIMSLhd13kAtHmsyVRJLCRELQ.roa (hash: Sy2brI825JIDwfnRYmv5+hBpQhClnbRKdRnTs+cKh/c=)
5: trRwMwj1TozbbVDdJBYsUBjss8A.roa (hash: R2jnNGJ/7Zo+ytylzMHKu/XH3p37UtlobvuFEWQLQHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:54:6b:df:37:9f:a4:d2:7e:05:f7:ba:7e:7c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Aug 21 06:00:57 2025 GMT
Not After : Aug 22 06:00:57 2025 GMT
Subject: CN=117118545d6483a2f33ed1a4952127d2f89e9bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:63:43:0a:c8:8f:0f:e2:6d:72:99:2f:a7:
52:33:cb:48:ba:ec:15:a6:b0:04:96:d8:40:0a:53:
8b:4b:7a:34:e9:f9:46:99:71:c9:ae:be:9f:d0:cb:
75:46:20:e6:2f:09:40:67:7b:79:83:37:b9:e8:1a:
c3:88:f1:e9:4c:9a:cb:11:ec:97:ba:f6:eb:71:e2:
6d:75:5b:82:28:80:c2:97:bd:f8:c7:f0:94:e6:ac:
d8:3b:a6:9a:ef:61:1a:f7:46:a9:08:6e:fc:c4:a2:
28:98:a8:b6:19:7c:3d:f8:70:bc:fc:a7:93:89:e4:
da:99:05:0e:a4:58:81:52:76:1e:85:19:9f:48:4f:
66:4c:4c:51:7c:e2:33:0c:c3:45:58:43:57:b1:9f:
43:82:a9:44:ec:bb:e7:c1:80:1f:ba:a1:16:e7:a3:
2f:a3:c9:84:1c:db:dc:2b:74:eb:eb:6a:7f:25:42:
70:c8:0f:00:5d:85:ab:cf:b4:59:23:55:e9:b4:60:
b6:70:58:97:31:61:b1:86:67:c1:53:92:b0:0f:7b:
01:08:a4:7c:9f:fe:a7:9f:ec:b7:6a:44:d5:22:8c:
45:6a:fb:fb:c4:f0:2a:e4:08:81:e8:b0:7b:0d:3e:
2d:37:a8:17:56:88:5e:32:7e:85:d5:00:9b:55:23:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:18:54:5D:64:83:A2:F3:3E:D1:A4:95:21:27:D2:F8:9E:9B:B8
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:90:f5:c0:66:f3:7f:82:a8:61:d3:95:97:94:e8:bf:eb:e4:
c5:c7:f4:07:93:b8:59:5e:20:d2:77:3d:96:df:09:c7:b3:10:
d2:c2:5e:39:71:0c:e2:8e:cd:ec:a8:45:94:c1:a9:80:df:4d:
5e:d0:71:1c:fd:f8:0c:dd:29:de:52:26:7c:86:ad:16:e9:b1:
b7:9d:5a:6f:99:2d:67:5e:9e:58:54:2f:da:8f:96:a1:35:d6:
bb:91:b4:01:51:dd:c3:31:c1:3d:eb:6a:9b:80:6e:90:4d:7f:
18:26:78:17:58:a4:e4:9d:c3:0e:c8:d2:2c:57:6e:32:a0:b7:
e1:ec:b4:6a:98:a4:8f:18:37:02:60:02:59:03:21:d0:20:ac:
09:07:eb:ad:e6:ef:ad:31:cf:ec:85:e2:0c:49:16:03:0a:64:
f0:e8:b0:50:3a:6a:61:11:76:03:ea:5f:ea:73:47:b5:9c:76:
00:36:9c:2a:a6:ff:10:9c:91:4c:dd:29:1f:84:de:4d:7e:5b:
8e:03:60:ad:d5:59:20:04:94:83:b0:a7:60:c1:6d:06:8a:d2:
8c:8a:21:ea:38:c7:7d:03:9d:41:c5:d8:8b:46:6e:85:66:7f:
97:7c:80:13:9d:6b:da:0a:8b:8a:c8:e8:33:ba:1f:2d:95:32:
8c:04:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 14:22:57 2025 by rpki-client