Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: rc8HOUIHUBGZzmxhQwTLwwtV9wfbU7nBqI1+BAEWQAE=
Subject key identifier: 69:F0:8C:73:10:4B:EB:DA:F5:1F:05:8F:40:90:36:25:E0:D0:17:56
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0199168895AA3E8620D390A3F8A1B6BDC84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0ED7
Signing time: Thu 04 Sep 2025 21:01:13 +0000
Manifest this update: Thu 04 Sep 2025 21:01:13 +0000
Manifest next update: Fri 05 Sep 2025 21:01:13 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: lVt/i3/ZaqsVAdWSyItqN78a4muHPKJmrTz37DmJox4=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:95:aa:3e:86:20:d3:90:a3:f8:a1:b6:bd:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Sep 4 21:01:13 2025 GMT
Not After : Sep 5 21:01:13 2025 GMT
Subject: CN=69f08c73104bebdaf51f058f40903625e0d01756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:16:a2:9f:1b:7c:d1:01:1a:8d:5c:42:11:
d3:6e:23:c4:35:36:76:11:58:67:67:d1:7c:a3:21:
65:83:56:59:a2:bc:d8:8d:a0:41:c8:e4:7b:a7:e4:
b3:9d:40:d3:e1:cd:04:9c:92:f1:4e:4a:56:b5:50:
dc:75:24:60:d0:4e:72:20:1b:b2:a6:4b:8c:82:a7:
db:75:c2:24:54:98:60:e3:25:6e:1f:55:bb:a5:c6:
75:0f:0a:21:75:89:d6:09:f1:10:fb:1e:ab:d9:78:
0d:75:89:9e:c1:d9:aa:78:b2:6c:02:21:96:ec:3d:
76:6c:4f:f6:9d:37:de:fb:09:64:a4:71:30:5f:ac:
96:3f:ac:9f:23:0c:66:eb:21:b7:e8:77:c6:9a:73:
32:58:a7:b5:b8:2a:09:a1:4b:ab:ec:95:dd:bf:8a:
56:34:99:1b:b6:43:cf:75:fa:67:c0:73:85:7c:5b:
c6:e4:e2:cc:7e:48:68:70:36:59:19:3f:10:73:2e:
6b:cd:2d:6d:9b:c7:a5:9c:cd:cb:f7:82:e0:a7:52:
d7:c5:c0:a9:2d:05:5c:7f:83:34:8b:ee:32:98:45:
1c:a3:02:d0:29:45:9a:a1:7d:aa:70:60:11:85:8d:
b4:02:62:cb:e0:1b:13:c2:83:f6:86:4d:eb:37:4f:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:8C:73:10:4B:EB:DA:F5:1F:05:8F:40:90:36:25:E0:D0:17:56
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:ce:d8:df:dc:2f:9d:f8:fc:d2:45:2b:89:73:fb:ae:96:
f6:02:fa:11:86:ef:0d:c9:c5:72:35:1e:cd:9d:3c:d1:91:4b:
73:d8:77:3f:87:68:c3:49:cd:33:bb:b7:e5:0e:08:52:4b:e8:
7d:ab:75:c7:4a:7b:4d:4f:68:5b:c7:52:52:68:42:90:10:c8:
ed:7f:80:9b:e9:61:14:ef:9a:f0:17:9f:0e:df:00:a0:73:c2:
10:4d:fa:c8:21:f1:01:1a:41:b0:22:27:75:49:32:80:e0:51:
16:e5:71:9d:42:c6:45:38:12:87:c9:f8:93:7f:cd:7f:60:fe:
3f:6a:6e:7a:d5:39:53:33:10:c2:5d:0a:cf:97:b5:17:ae:e8:
d8:05:65:19:6d:70:cd:dd:28:cf:d0:57:db:e0:29:0c:a6:b9:
42:a5:15:0a:98:cc:c7:61:68:e1:9f:07:a1:5b:38:41:d8:8f:
d2:97:d2:a4:ee:64:3b:61:db:78:90:f5:f3:b6:4e:6a:f8:74:
83:0f:22:4d:d9:7c:42:31:6c:c3:41:59:0a:09:61:b0:d8:54:
dc:c7:c1:d7:98:5b:d7:e7:67:db:4c:6b:8b:2d:68:47:d3:50:
0c:e4:b0:00:a2:bd:45:e1:59:1a:8b:a8:62:13:5f:ea:c0:98:
eb:08:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:09 2025 by rpki-client