Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: lxZXOZ5t3uLe7fcvd92qv13bMH40RACOOgsaTnOWpdo=
Subject key identifier: 86:8B:2B:0B:EC:08:5A:E3:F9:45:B8:06:B4:74:10:F5:CD:53:0E:B2
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0199221EACBF13805F57E9F98993E887D2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:59 +0000
Manifest this update: Sun 07 Sep 2025 03:00:59 +0000
Manifest next update: Mon 08 Sep 2025 03:00:59 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: EuPPOKcYV4+7B92MUdxC9Sh9L6MDzdjaVj0HPChWhkA=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ac:bf:13:80:5f:57:e9:f9:89:93:e8:87:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Sep 7 03:00:59 2025 GMT
Not After : Sep 8 03:00:59 2025 GMT
Subject: CN=868b2b0bec085ae3f945b806b47410f5cd530eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:45:2b:ea:57:ec:21:98:66:53:67:5a:19:
35:ed:36:ba:25:d1:ab:1f:9f:34:8e:11:d2:fa:ab:
6a:b5:f9:81:62:df:af:e7:bd:eb:32:25:8e:a2:47:
b2:93:a6:be:32:61:b5:27:e9:62:bc:52:d8:1c:2b:
1b:4a:eb:1d:75:6f:9b:f1:9c:ca:2f:d7:c0:fd:60:
14:21:97:27:5b:bc:a9:4c:1d:80:96:d5:1d:45:e6:
21:e1:e1:5a:da:9d:74:b2:b0:31:7a:69:85:21:5c:
db:d3:eb:d5:4c:39:58:82:56:24:08:fc:e0:07:95:
3f:05:5e:16:0e:67:be:22:7d:1e:0b:8f:14:2a:be:
3c:af:14:56:f1:d9:e1:60:64:38:7f:10:c8:a5:4a:
41:b0:7b:6a:20:45:be:11:59:79:c0:30:fb:2f:68:
d0:38:58:54:86:d1:62:f5:9e:2e:1e:8f:8d:de:2a:
15:95:c0:70:53:01:60:69:30:52:01:ee:92:f1:90:
32:b1:fe:f4:4b:9f:7c:70:9f:0c:c3:ea:fb:ff:65:
6c:71:4e:09:70:b3:f4:9c:fa:c2:46:ca:a1:d8:8f:
06:2f:27:4f:c3:b2:c6:1f:7a:62:9c:bf:7a:73:65:
b3:5d:c5:ff:99:b8:80:2b:9d:2d:a4:6a:bd:c9:99:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:2B:0B:EC:08:5A:E3:F9:45:B8:06:B4:74:10:F5:CD:53:0E:B2
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1c:b0:fc:f3:7f:b8:3f:d6:21:d7:32:fd:ba:63:cb:cf:33:
23:d6:4b:3a:eb:2e:0d:31:5e:2d:7b:75:fd:90:25:6a:4d:85:
ea:d4:45:dc:0b:ba:38:b0:26:47:78:98:6e:22:fc:02:19:08:
7e:8b:62:00:d0:d3:28:35:e7:1c:b3:c7:80:fd:12:a8:53:93:
f4:04:6f:3f:f7:75:d1:31:4a:39:82:0a:81:83:f9:0a:36:dd:
98:c1:8d:78:c5:fc:28:f4:dc:a2:58:cd:f7:ca:9f:4e:76:6d:
04:ca:76:af:dc:c7:37:14:02:99:84:9a:a7:bb:3a:aa:6e:98:
9f:4a:a4:23:d5:ad:c2:f0:70:bc:50:0e:c3:6e:e1:5b:57:4d:
4a:e3:82:a1:c7:6f:4e:f0:66:f0:83:e2:88:f4:ce:22:c6:50:
8b:c6:d5:8b:b0:af:d4:01:ac:cf:27:37:a4:45:e7:61:cc:d3:
6e:59:86:26:0f:b2:d3:9a:ec:58:31:1a:33:42:08:e5:3e:d0:
cc:a5:5d:56:36:d6:30:a6:27:3d:30:b2:27:35:5b:f3:8f:45:
2f:19:a5:87:35:a8:d8:d9:44:33:3e:14:f0:b1:85:84:34:f7:
96:ac:6a:f1:01:ef:b3:b7:28:b6:22:31:6e:17:4d:1b:e1:97:
5b:16:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:02 2025 by rpki-client