Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: 9gD6d9WTzNY1zk0OgcjDBqqH7ZnURT63z57p8H5hQQI=
Subject key identifier: 31:45:3B:3B:D5:B7:39:BF:C1:40:3F:28:B8:45:20:15:D7:8C:8A:E1
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 0199240CC9E1D9501D3B480E3BB5DC1CD27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 1299
Signing time: Sun 07 Sep 2025 12:00:41 +0000
Manifest this update: Sun 07 Sep 2025 12:00:41 +0000
Manifest next update: Mon 08 Sep 2025 12:00:41 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: 2mNQ5AR3B9fXDZ9YPtsOGJ2mXVuguSYO2VLvpyhUPsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:c9:e1:d9:50:1d:3b:48:0e:3b:b5:dc:1c:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Sep 7 12:00:41 2025 GMT
Not After : Sep 8 12:00:41 2025 GMT
Subject: CN=31453b3bd5b739bfc1403f28b8452015d78c8ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:60:06:f0:10:80:9b:50:4b:71:76:48:0b:
e7:12:5f:1b:89:58:b5:02:41:42:40:8d:6d:bc:8f:
0f:ee:fb:e6:de:ae:9e:b8:0e:4e:6b:70:a4:d3:17:
28:52:13:7c:75:f1:b6:96:22:19:8e:c2:ae:49:e4:
88:9c:54:07:0f:ea:de:24:73:41:27:c6:41:38:c6:
e5:7e:72:e7:f0:3d:4e:b4:7e:61:47:fd:e1:ca:4e:
90:9f:3d:d3:03:d2:d2:dc:03:2c:73:c5:10:9c:05:
51:ae:bd:b0:8a:2c:97:8a:df:e6:8b:dd:01:32:2b:
bc:0e:74:d1:20:e2:e8:22:3e:6d:47:32:84:2e:76:
dd:91:1b:1f:8c:d6:e7:53:0f:93:d0:a0:5d:55:0d:
55:93:70:cf:9f:39:83:5a:a4:a0:de:24:ed:18:76:
ed:38:fc:7c:92:9b:8d:13:99:0c:dd:db:1a:17:69:
9c:df:a6:12:90:bf:9c:08:69:26:57:bb:69:20:8a:
d4:02:31:a5:73:ca:30:99:0f:86:ea:55:e3:a7:7d:
a6:a3:1d:42:cc:f4:8c:ea:23:94:95:9e:47:67:f2:
de:6a:ab:b3:8e:fd:15:7e:a7:30:3a:b7:85:8f:69:
fd:5a:de:58:6c:37:d9:ca:9c:d0:48:86:d3:27:23:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:3B:3B:D5:B7:39:BF:C1:40:3F:28:B8:45:20:15:D7:8C:8A:E1
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:8e:a1:8a:ea:f2:15:6f:67:04:05:09:ff:d8:2a:e1:ff:
9d:b2:9a:42:4f:61:d7:c4:13:86:4e:80:41:ee:77:42:5d:80:
ef:e7:dc:b5:98:f0:e1:26:4a:00:e4:c8:be:1e:97:e2:fe:a9:
26:52:e8:3f:4a:d0:fa:c4:75:89:6e:2d:d0:93:4f:89:b8:ab:
f9:7c:6b:e5:67:3e:f8:8f:ed:d0:d2:a3:1f:1e:5f:29:af:9d:
2e:fe:47:f5:e9:af:08:cf:12:07:94:18:1f:54:fb:f9:bc:39:
88:ec:a2:b3:cc:d6:f8:99:a9:fe:44:8f:60:3d:5c:2b:e7:ab:
b0:79:fc:1d:e9:82:36:72:ff:f2:9f:1c:c8:b9:f6:b9:14:4b:
f3:9f:23:9d:c7:9e:51:16:df:f0:dc:01:87:d3:cf:e4:2b:00:
28:21:fa:96:5c:d7:42:83:5e:11:75:17:b5:fe:36:4d:55:e3:
4c:0a:81:be:d6:de:34:e2:97:7d:12:b3:2d:c8:52:f7:4d:f2:
60:ad:1b:9c:78:a6:b9:e2:43:a0:39:a4:f7:87:3a:10:bc:77:
5a:18:e6:de:7f:a1:02:e5:a7:37:50:fa:6e:43:79:dc:29:7a:
e0:e2:65:bc:df:6b:60:09:71:12:ef:60:98:50:b3:2c:3a:94:
f1:1a:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:45:05 2025 by rpki-client