Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: QGa/dgUadKMh5h1UP4yP2cMjIrm5DHdpGK0q4hcjymM=
Subject key identifier: 45:6F:95:0F:3F:F0:28:EB:BD:84:D1:CF:24:0A:22:2E:73:4C:E6:86
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 019916F60F0042A5795EA7FABAA6FD1D5406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0C59
Signing time: Thu 04 Sep 2025 23:00:48 +0000
Manifest this update: Thu 04 Sep 2025 23:00:48 +0000
Manifest next update: Fri 05 Sep 2025 23:00:48 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: uRS6HNx/0bTcztd1rB82fF6QCn61USgXV6U4aMTQf8o=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:0f:00:42:a5:79:5e:a7:fa:ba:a6:fd:1d:54:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Sep 4 23:00:48 2025 GMT
Not After : Sep 5 23:00:48 2025 GMT
Subject: CN=456f950f3ff028ebbd84d1cf240a222e734ce686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:6b:6a:2f:e1:fd:1d:b4:d4:ed:58:12:c7:
d0:0f:3e:6a:c8:8f:8a:af:8c:9b:ac:ec:e5:7b:38:
18:bc:a7:ad:c5:36:c2:cb:2d:35:6a:a4:d2:e2:13:
c5:01:6f:92:0c:a3:f2:ff:54:bd:3a:28:7a:41:eb:
ab:bb:98:3b:b1:e6:80:18:37:06:ae:42:c5:8f:8f:
41:4d:af:42:50:e3:ef:1c:6f:72:ce:e6:65:c0:cd:
98:78:08:ed:13:17:37:1e:b8:b5:d2:c1:59:bc:52:
9e:9d:5b:db:d3:9a:bb:8f:cd:36:87:73:10:a7:5c:
6d:b3:d5:34:92:6e:2d:0c:98:37:fc:c8:7d:33:49:
f4:4e:39:42:c8:25:9f:88:f5:e7:42:da:78:cb:61:
3a:4e:1c:8b:f8:22:3c:d8:b9:1b:fb:28:22:4d:53:
a8:e9:f0:0e:09:36:32:35:14:ad:3a:05:d6:b2:8f:
37:4c:72:f6:b3:9a:4e:37:21:49:1d:ec:e0:eb:c8:
35:5c:33:3f:f8:1d:86:f9:d9:1b:73:f9:4d:82:61:
8d:d9:20:6c:90:3c:74:ad:d8:c5:32:67:0c:7a:d3:
ad:a8:7c:97:b3:9a:98:91:7c:80:f8:db:09:6d:d8:
d5:f4:b8:49:85:f1:cb:1f:54:01:25:3c:f3:90:91:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:95:0F:3F:F0:28:EB:BD:84:D1:CF:24:0A:22:2E:73:4C:E6:86
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9a:7b:81:c3:8c:3f:9d:0a:41:2c:0a:4a:3b:46:af:61:a2:
b2:af:a3:33:e1:3f:63:ba:95:f0:f1:0b:2c:30:31:66:18:8b:
ef:3f:02:f7:a5:ed:70:b3:9e:ce:77:02:62:4a:9b:a9:23:27:
85:cc:56:4e:ca:4b:d6:e1:ef:27:7f:66:a6:3b:81:39:23:04:
a4:c1:81:70:5b:b6:d4:7a:c4:f4:cc:fa:91:0e:d3:01:34:29:
d4:f8:58:fa:79:34:c2:00:b3:df:d1:8e:59:4c:af:13:10:3b:
94:27:f8:44:b7:41:3b:c0:67:ea:e1:90:e3:5a:4e:43:65:ef:
bb:d2:51:09:41:e5:d6:3c:10:72:02:f0:17:0b:74:ac:da:8a:
aa:30:41:b7:fa:b9:49:33:2b:ac:34:87:81:b2:f3:56:3c:ac:
84:81:64:62:4b:8b:e5:2c:56:19:66:da:9a:a2:58:f4:db:9a:
e7:09:2d:1c:7e:71:72:3b:57:fe:30:04:d1:ae:e2:8a:5d:a8:
48:3a:26:27:71:5e:18:7d:3c:bc:66:b4:28:26:fb:bb:bb:3e:
b7:f2:f1:10:9e:9a:78:7a:69:96:5a:f7:c6:80:c8:8b:49:f2:
4c:8e:e9:d3:77:dc:04:15:b0:4e:fb:43:07:0e:74:c7:eb:fc:
b6:3f:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client