Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: dCcJ3p7VXgg4OARMqa/xPY2VP37AXcDTKtz24DdLXIY=
Subject key identifier: 18:72:87:21:29:A1:9C:79:04:FB:FC:34:1B:13:05:6B:D2:FF:AD:D3
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0199228C492A9D130A1EA6870002DCBE887D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:43 +0000
Manifest this update: Sun 07 Sep 2025 05:00:43 +0000
Manifest next update: Mon 08 Sep 2025 05:00:43 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: 9OdrdhB+JYHHfSDwxEXtX5DU2zenFmyP9FeKGD+QMyM=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:49:2a:9d:13:0a:1e:a6:87:00:02:dc:be:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Sep 7 05:00:43 2025 GMT
Not After : Sep 8 05:00:43 2025 GMT
Subject: CN=1872872129a19c7904fbfc341b13056bd2ffadd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:0a:96:f2:9c:7e:df:2a:f3:84:7f:84:59:
9f:68:cf:7d:da:db:a7:3a:0d:6b:ab:b1:69:69:c1:
83:2a:3e:24:3b:02:9a:3b:73:16:6b:d1:bd:99:15:
ca:04:86:fa:50:12:33:7f:3d:08:bf:e5:c7:2b:71:
4d:e5:0d:02:0b:2c:05:be:61:8c:fa:3f:54:3d:59:
06:62:db:e0:bc:36:02:e1:1c:37:30:b3:84:45:2d:
0c:6c:a5:1e:21:48:d4:bc:e4:f7:1a:f4:85:eb:e2:
0e:86:75:f5:a0:a2:f9:4d:53:f5:75:0a:e2:85:cb:
d0:08:b6:f8:0c:12:99:25:76:53:a5:40:d3:7b:14:
b7:3c:b1:09:20:aa:ac:85:34:ad:e7:84:a5:a5:44:
50:8f:f0:4a:0a:31:d4:de:a3:5d:11:30:1e:91:fe:
65:18:90:94:31:70:80:2e:1c:e8:19:f6:8c:4c:b9:
a4:6c:eb:aa:82:92:c4:a0:17:76:71:a0:b4:31:41:
b0:de:0e:bd:8f:57:2c:dd:49:f5:c1:f5:65:18:3c:
1a:9c:46:70:cb:8e:32:71:45:7c:09:76:2e:9e:b5:
df:eb:b5:28:26:a4:1c:7c:a5:ca:a7:55:04:bd:63:
30:ba:35:6a:26:d0:79:28:d7:b6:95:cc:aa:33:08:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:87:21:29:A1:9C:79:04:FB:FC:34:1B:13:05:6B:D2:FF:AD:D3
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:28:1e:be:c3:43:3b:b2:92:8c:48:08:b0:f7:5a:ea:6e:eb:
57:c1:1d:e4:90:c0:39:0f:70:15:8f:ef:a7:1e:58:5b:b2:64:
df:59:89:e1:9e:a6:76:42:01:ef:11:4a:d6:bb:fb:14:63:87:
2b:54:e3:7f:a1:4e:e6:b1:05:95:8c:08:42:7b:c0:a0:43:63:
75:46:ec:0d:6f:ad:f6:91:b3:ea:5b:fc:4e:a0:a0:74:ba:f5:
cc:81:d6:50:82:7f:95:23:7a:c1:c2:63:da:1c:de:fb:77:f2:
38:da:cf:60:00:dc:bf:cd:fa:97:ff:56:cc:1c:11:34:b6:51:
f8:8b:a8:88:44:de:cf:3a:bc:2b:2f:bf:4b:fb:d4:83:4d:17:
85:bb:94:23:88:8e:a0:07:8b:d5:32:74:57:12:e7:0d:2a:fb:
db:b1:46:c7:07:3e:36:d3:2d:d3:a6:0c:96:8b:ab:2a:3f:40:
25:16:a9:f5:a5:60:0a:45:88:1f:00:74:6a:7b:6a:12:04:43:
0b:37:21:bf:29:cb:9b:19:50:15:f2:e8:0e:51:e6:1a:50:f5:
a3:f8:55:6c:00:31:1c:ee:d7:e0:66:cb:b1:4e:74:4f:e2:e5:
2b:11:ed:50:77:91:b4:55:d9:02:87:3d:27:2b:54:9e:11:a1:
c3:bc:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:04 2025 by rpki-client