Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: 2/Tx5ia3JZ8GG66LRJ/9akhBiKEXAyv565OJOxR5wAk=
Subject key identifier: A4:5C:E5:B6:D2:7F:33:AD:8E:59:DE:15:54:6B:6F:81:47:91:A8:D5
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 019934925B350054E8A3B4C0AD1B0DDEF19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 109F
Signing time: Wed 10 Sep 2025 17:00:30 +0000
Manifest this update: Wed 10 Sep 2025 17:00:30 +0000
Manifest next update: Thu 11 Sep 2025 17:00:30 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: w0ZJKIJW9FwqMKBl8gOHe+eR5GcWlm716/DXN/OGw64=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:5b:35:00:54:e8:a3:b4:c0:ad:1b:0d:de:f1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Sep 10 17:00:30 2025 GMT
Not After : Sep 11 17:00:30 2025 GMT
Subject: CN=a45ce5b6d27f33ad8e59de15546b6f814791a8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0b:c6:cc:5d:5e:45:7a:ba:68:8f:9e:e2:90:
ea:30:50:c4:85:79:bb:27:6c:6e:22:ec:a9:c0:ae:
29:f7:6f:84:18:88:eb:e2:31:d8:fb:00:94:9d:db:
42:b0:8c:c3:2a:f3:2e:f8:ca:0c:f3:d9:44:db:b0:
74:b8:08:2a:44:18:be:88:f8:6a:25:c9:82:10:0c:
00:24:23:4f:d2:b0:2f:0e:a8:a8:82:7f:35:37:ba:
61:bb:bc:8e:06:bd:55:19:f5:9e:d0:8d:9e:16:c3:
ae:03:e1:67:2b:5e:4f:fe:e5:1e:a1:2d:cf:84:d2:
88:82:11:87:32:27:35:f6:3e:75:ff:a7:ee:05:04:
71:5b:a3:6d:44:6f:12:f5:19:65:d3:49:48:39:d6:
b8:f3:29:f8:72:22:45:26:df:36:05:28:2c:fa:ec:
f1:79:e5:ba:7f:45:f0:c7:a5:8e:c7:f6:3a:88:cf:
98:99:7a:8a:44:ae:5b:2f:3c:94:ea:24:93:e6:1a:
ba:3a:a8:26:0d:69:a6:7e:71:53:19:7e:ec:cc:19:
e1:df:4b:10:66:9b:29:14:8b:18:d4:98:71:91:c6:
c2:36:d8:b9:e3:27:5e:a9:20:e4:5a:13:8f:65:0f:
d0:21:0a:a9:15:36:1f:70:39:82:ac:7f:f7:71:71:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:E5:B6:D2:7F:33:AD:8E:59:DE:15:54:6B:6F:81:47:91:A8:D5
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:bf:07:a8:d3:48:76:1d:51:85:08:f9:dc:fd:fe:07:07:
4b:57:c3:80:09:ca:bf:76:02:09:12:1d:b1:e3:6e:66:26:cd:
94:c3:a6:3c:85:08:88:b2:ce:d9:f6:dd:24:d7:51:da:56:c5:
aa:c8:dc:e9:c0:dc:4c:92:f6:c6:51:f2:14:96:eb:a4:5d:4c:
2c:86:58:aa:d3:84:16:85:2c:2e:ae:96:0b:58:17:42:4f:23:
85:9d:5f:c3:b9:ff:57:91:02:70:37:a2:ef:4d:79:fa:e9:2c:
f4:3d:9a:d6:1f:0b:82:85:8e:b0:ce:f8:87:40:5f:3f:22:98:
4d:4a:99:b0:6f:0a:6b:3d:62:a4:a2:c0:2a:e0:e0:58:42:94:
e3:26:e5:5e:44:fd:f8:c3:44:1d:1d:02:26:e3:81:10:31:42:
ad:b0:a4:af:de:18:6e:e9:18:55:6b:a0:16:6a:dd:24:95:aa:
e6:32:31:8a:e2:b0:63:9b:be:47:20:3c:ba:18:fe:8e:de:e5:
c4:fe:43:42:3c:d1:4a:22:1d:6d:f2:a5:82:78:b5:bb:96:52:
4b:9f:8b:9c:ab:9b:63:8b:23:01:de:9c:cb:90:2b:42:16:25:
de:93:fe:23:2f:56:72:51:78:40:a7:78:63:af:94:a8:24:ff:
74:09:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:19:42 2025 by rpki-client