Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: ixzn2x5T0JoQmhMAQfUezMGGh0G/o52Pj741hpcGYlw=
Subject key identifier: 57:92:A8:D2:FF:79:1A:98:D4:A9:3D:12:46:57:27:72:55:55:A2:F3
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 01995F7DC80FFB8F91A4B852250B4F474355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 09E8
Signing time: Fri 19 Sep 2025 01:01:42 +0000
Manifest this update: Fri 19 Sep 2025 01:01:42 +0000
Manifest next update: Sat 20 Sep 2025 01:01:42 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: WN06mSuDlrNpQHeAb8Y0Kr39GqSihXuHEhUxeZgMzWg=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:7d:c8:0f:fb:8f:91:a4:b8:52:25:0b:4f:47:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Sep 19 01:01:42 2025 GMT
Not After : Sep 20 01:01:42 2025 GMT
Subject: CN=5792a8d2ff791a98d4a93d12465727725555a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:84:8d:df:30:9b:8a:65:5a:28:8d:9c:79:
66:d0:8d:56:b3:3f:51:b8:f6:64:e8:f1:88:c6:1e:
a6:4b:90:ca:0a:28:34:e2:c3:93:87:0d:c8:9a:b7:
b4:9d:2e:b8:14:a8:dd:2a:e3:70:90:88:71:1a:88:
39:d2:ba:79:c5:74:f0:8d:4b:96:cc:72:12:12:c6:
82:03:85:90:ef:4e:78:c0:af:28:e4:79:65:9c:42:
0b:a4:b3:21:e8:88:51:1d:37:31:57:2a:1b:e9:cc:
b3:61:85:e2:62:6e:91:9e:10:e2:f8:c8:e2:69:ff:
f2:bd:fd:2e:32:90:c8:db:89:e5:9c:26:4e:eb:cd:
5a:2d:38:44:28:75:7b:57:ab:a2:3e:fd:7b:8b:1a:
7a:d6:28:48:59:9b:b8:f1:9c:74:f6:7e:65:78:00:
3c:e4:b9:b4:5e:84:50:99:52:07:24:27:f6:30:0c:
c6:3f:7c:b2:36:35:b6:c1:88:a7:59:bc:50:14:34:
3d:c2:33:c8:60:cd:41:f9:c1:19:5e:2e:eb:01:3c:
1c:5e:4e:5a:98:c4:33:f5:94:39:1e:f5:3a:e5:2e:
e8:f8:3c:9b:91:26:f4:77:1e:1c:93:0f:55:fb:22:
03:23:8d:e7:12:e8:d6:94:be:97:ab:18:ed:b7:bc:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:A8:D2:FF:79:1A:98:D4:A9:3D:12:46:57:27:72:55:55:A2:F3
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e4:54:df:c2:bc:53:0b:27:1b:fe:c7:e1:31:74:e5:73:29:
bb:d4:42:48:fa:67:23:83:18:a7:e9:3a:3d:5e:bc:cc:0d:0d:
f5:b8:88:1a:b2:34:a6:d8:aa:f6:1b:27:0c:71:0a:e0:1b:0f:
40:a4:6e:d9:28:71:1d:69:94:c8:b0:42:ef:66:2e:af:30:90:
42:0b:d6:34:5d:d6:e9:dd:27:d7:5f:17:f4:a1:0f:64:1c:4e:
ce:73:e8:a3:7a:cf:d2:be:d2:9a:91:7b:06:51:56:ab:b0:06:
ae:40:ad:a0:52:6b:42:e1:28:f1:81:d6:9e:f8:05:da:0d:78:
cb:f6:74:02:0c:75:c6:65:42:77:bb:5f:cd:7f:97:d2:d0:99:
6d:8e:62:b7:25:0a:89:88:1f:82:b6:fd:96:d8:fb:97:16:a4:
36:d2:e7:7c:60:f9:36:cf:ab:4f:1d:17:96:a9:39:7d:ca:a1:
2e:df:f1:92:65:1e:f9:9e:d5:9f:5d:cf:ad:c4:b7:b1:ae:88:
83:2b:fb:5c:f7:e6:00:85:ee:b2:76:22:e7:d3:b8:2a:ce:a8:
63:f0:1b:24:45:9b:44:04:4d:91:c2:0a:1d:1f:5b:f6:7c:08:
b7:f9:dd:22:23:f6:63:93:b3:a8:7e:b9:82:15:ea:20:3f:0e:
4b:ba:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:24:31 2025 by rpki-client