Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: Q/KcEQWm6/0PpQdA3RvthPajdDcfP7W+VZmGUhc4GYM=
Subject key identifier: 3D:68:CF:AF:D1:3F:22:F4:9C:C5:6A:E8:BC:E2:36:30:FE:C0:2B:29
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0198C7C9417CF152688AC6FB55C79F4BDEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1276
Signing time: Wed 20 Aug 2025 14:01:51 +0000
Manifest this update: Wed 20 Aug 2025 14:01:51 +0000
Manifest next update: Thu 21 Aug 2025 14:01:51 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: 0/KFXVYevF0yVYjJ7dUZcmCjYVueWmnrVAuTj0xi5HY=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:c9:41:7c:f1:52:68:8a:c6:fb:55:c7:9f:4b:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Aug 20 14:01:51 2025 GMT
Not After : Aug 21 14:01:51 2025 GMT
Subject: CN=3d68cfafd13f22f49cc56ae8bce23630fec02b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:55:75:89:44:8f:c8:0f:bb:6d:a0:4d:8b:
65:f1:92:0f:d5:3a:23:9f:1c:86:a1:30:89:f8:07:
74:ca:c3:ec:19:0f:a7:60:e8:15:cd:00:6a:b3:5e:
cc:9a:64:9f:ef:19:be:49:98:19:9f:4f:b5:c5:72:
aa:69:27:c5:f7:fc:a9:2e:8e:c3:64:91:07:f3:01:
56:bc:ab:07:8c:50:22:8f:83:d6:c2:e2:cd:77:c3:
7f:19:7e:ac:50:5d:45:de:ce:37:98:cc:48:b5:5d:
23:93:cf:c9:00:f8:5f:6d:54:d1:7c:9a:07:57:c8:
e1:fe:46:6c:06:00:6d:78:fc:07:80:19:da:11:26:
b3:be:7b:91:58:6f:00:82:79:d3:f0:fd:ca:f1:62:
4f:7d:fe:d2:6e:44:2e:0d:41:c7:b9:55:b8:18:50:
60:67:81:c8:ea:a6:15:d0:79:93:43:4e:e0:0b:80:
6c:d6:45:50:e2:85:f8:35:82:f1:6e:63:80:5f:b4:
ad:9c:dd:b2:f5:49:3e:9a:18:bd:de:4c:38:f7:ea:
66:a9:8d:65:49:85:ac:e4:40:20:aa:02:f3:9e:eb:
f4:25:13:90:31:ef:ae:ca:9d:7a:68:b6:c3:59:5a:
60:04:ee:b3:9f:fb:4f:96:42:e3:b5:b5:09:8b:54:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:CF:AF:D1:3F:22:F4:9C:C5:6A:E8:BC:E2:36:30:FE:C0:2B:29
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:71:16:77:ed:94:16:c4:81:d5:19:3b:05:33:9e:60:32:
86:35:1a:58:fb:5a:72:9b:ad:8e:6f:44:c1:88:d7:bf:5d:26:
93:2d:c7:9f:13:53:f5:14:c1:7c:f5:5d:a2:a9:41:2a:e7:78:
35:b4:ee:d8:f4:4d:06:67:8e:7b:38:21:ed:cd:8c:b0:c2:1f:
d8:69:7b:03:fc:a7:b7:94:37:ba:be:33:5e:a6:74:59:4d:be:
1c:06:7a:28:1c:20:eb:ec:f3:7b:11:ec:68:89:d2:d7:ed:df:
52:90:88:23:a0:c8:b8:d1:26:a9:9c:75:b3:2c:53:62:04:df:
8a:9d:3b:dc:48:85:17:19:59:99:dd:1b:3a:a4:3a:66:cc:6a:
04:8d:31:3f:6b:49:be:58:3b:8e:6f:04:7e:09:e1:e2:6f:f2:
aa:60:72:0e:4f:ed:76:4d:07:fd:be:bf:0a:12:fe:57:e9:f4:
cc:8a:08:f3:f6:01:b1:97:9a:fa:1f:2c:26:95:10:02:76:c8:
a1:0a:c6:06:fd:23:3d:f5:dc:00:99:61:4d:84:48:ee:b5:ad:
ac:dc:9c:8e:58:dd:98:ea:8e:93:d7:84:05:10:a8:8c:87:2a:
56:f6:dc:cc:95:dc:9e:da:e7:1d:5d:d2:fa:f2:e1:43:66:69:
2f:ba:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:47 2025 by rpki-client