Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: aMx5ZjvjoCKqGcVsG+sUg5jVvD24lK1oDgbX02V/2T8=
Subject key identifier: ED:2B:F0:DD:46:F3:4E:1F:58:DB:90:A2:7A:D2:CB:8B:DA:C8:A3:81
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 0199221F05DAD15894D4C370FA2F93E4073C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:22 +0000
Manifest this update: Sun 07 Sep 2025 03:01:22 +0000
Manifest next update: Mon 08 Sep 2025 03:01:22 +0000
Files and hashes: 1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: f3tW1U/1o+Ia2j0tJw3Te4XLbu4ZZIY0VF/cRrOF9Uw=)
2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:05:da:d1:58:94:d4:c3:70:fa:2f:93:e4:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Sep 7 03:01:22 2025 GMT
Not After : Sep 8 03:01:22 2025 GMT
Subject: CN=ed2bf0dd46f34e1f58db90a27ad2cb8bdac8a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:d3:63:c6:ff:64:b2:25:50:48:18:a1:af:
ef:9f:30:5d:18:11:43:fa:ad:4a:af:46:5b:3e:db:
65:69:ee:bf:2e:0e:28:a8:31:12:4a:6b:40:40:7f:
9d:71:51:a6:81:f0:f7:1e:d0:ae:6d:fb:9a:62:de:
17:03:ab:ca:9c:38:06:9d:ba:58:09:2e:ce:36:94:
01:8a:91:8c:67:8e:be:65:85:05:43:7d:87:71:cd:
37:80:25:8f:e7:39:ad:6b:d9:b1:9a:de:5c:32:9a:
4d:80:a7:9f:09:4a:e2:d2:1d:ba:1b:18:90:31:d5:
5e:2a:7f:95:bc:94:97:22:eb:2d:19:e9:15:27:96:
fc:c1:6d:9c:92:17:b4:73:01:32:79:cd:77:71:a1:
5a:03:d3:b4:bc:17:75:9b:fa:10:94:b5:b9:cd:2f:
72:91:57:36:30:ec:b0:65:ce:31:a5:2e:70:07:78:
e2:ae:4b:bc:7c:a7:6d:55:8f:bd:11:85:8d:19:1c:
6f:75:2a:2c:2f:09:1e:fe:80:ab:97:3f:3b:5a:ec:
82:94:da:ae:08:08:28:da:6f:67:c2:9a:d2:b9:84:
8f:20:57:da:e9:23:94:ff:48:e3:a8:a6:b9:6a:bd:
8d:15:4c:91:dc:40:46:d7:8b:86:64:29:74:cc:57:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:F0:DD:46:F3:4E:1F:58:DB:90:A2:7A:D2:CB:8B:DA:C8:A3:81
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:a0:7c:d9:5d:26:78:b1:f3:f7:f0:49:37:88:a8:af:93:
12:43:f6:b0:e3:43:3a:f4:2e:62:cb:66:ab:75:4b:1a:72:0d:
58:f7:c1:91:68:52:22:ef:18:fd:c6:bd:e7:52:0a:c2:00:3f:
70:af:56:75:73:47:ca:a2:b2:3a:97:6c:a1:98:24:56:3d:4c:
98:a4:a2:ee:3c:31:50:93:56:12:24:4c:fc:3a:43:42:30:14:
19:f4:ef:f3:b4:ed:90:d1:82:2f:13:47:81:14:26:0b:16:65:
a9:05:d0:14:94:94:21:87:9a:f3:67:46:62:a4:1b:65:f3:13:
2b:c7:7a:27:73:fc:c4:8d:61:14:b2:9c:3c:8f:0e:82:79:56:
26:1d:4e:be:a1:4e:35:4e:42:e4:f4:ce:fe:ac:b4:77:35:b8:
f1:75:c6:a3:8e:de:c2:b7:b2:5d:18:c1:24:22:b5:43:ac:0e:
6d:17:17:27:1e:7d:d5:e6:74:aa:aa:b4:02:89:48:ab:8e:8e:
3b:e9:c9:73:e5:b9:06:8c:17:ff:d5:27:17:31:31:19:ed:4f:
55:9e:d5:ca:f7:5b:bb:93:3d:46:d8:d3:0e:32:ff:a4:09:0c:
0b:27:10:89:69:f6:85:1a:8f:3d:b7:55:b0:ef:df:61:e7:e5:
c9:52:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:00 2025 by rpki-client