Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: 5DvOL9YIBkzbv7K4NuIsIl8lu35S5MeHk6npqfTVVvs=
Subject key identifier: 9E:71:87:93:C2:D5:AC:90:39:C4:5C:6C:AA:D4:CD:42:3D:8F:F6:51
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0198C75B3FD859B1DEE56D983ED6EC9B1B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 086F
Signing time: Wed 20 Aug 2025 12:01:42 +0000
Manifest this update: Wed 20 Aug 2025 12:01:42 +0000
Manifest next update: Thu 21 Aug 2025 12:01:42 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: Hy3TTZDfbEUV4FX+lq6aborNtZTqTocGsCjEZXOl7Zk=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:3f:d8:59:b1:de:e5:6d:98:3e:d6:ec:9b:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Aug 20 12:01:42 2025 GMT
Not After : Aug 21 12:01:42 2025 GMT
Subject: CN=9e718793c2d5ac9039c45c6caad4cd423d8ff651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:5b:c5:a0:3c:43:ce:ee:8c:00:37:00:69:
71:14:a0:a4:e3:f7:63:23:6e:60:70:55:5a:4e:5e:
e4:35:ce:a0:c9:36:90:c3:38:fc:4b:1a:98:ff:6b:
ef:3e:83:2e:86:0d:8a:28:4b:93:67:32:d2:fd:43:
30:b5:c6:74:ea:c4:c7:32:d7:95:63:fb:cc:46:a5:
d0:0d:5b:1a:8c:41:9f:97:3f:d5:65:2d:31:ce:cc:
9d:7f:5b:cb:27:b8:ec:d3:b3:00:32:7d:47:1b:d7:
49:19:f3:f0:89:2a:61:66:da:f5:89:9a:c9:01:87:
7b:31:ca:dd:e5:de:27:c1:c1:ed:e0:67:0e:09:78:
96:ff:ba:03:61:50:ad:8a:d3:78:c0:f4:7b:d5:c4:
f0:9a:88:21:6e:36:ac:45:70:49:09:78:9e:78:40:
3d:e9:9c:2c:e9:77:c1:a4:28:9f:21:e5:cc:16:a0:
14:3a:54:01:e1:8d:99:3f:3c:a9:e8:c0:c2:43:aa:
26:ca:46:68:85:c5:7d:51:97:fe:55:77:91:2b:a0:
d2:e0:fe:d6:01:79:ce:26:8c:8b:3e:99:4a:52:48:
f3:39:d1:13:80:c2:c9:a2:08:e4:d5:c9:d3:22:5e:
1f:d1:fb:c5:1b:9b:49:c4:a7:0a:53:8e:f7:bb:d4:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:87:93:C2:D5:AC:90:39:C4:5C:6C:AA:D4:CD:42:3D:8F:F6:51
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:7a:44:cd:04:98:a2:1e:65:09:ac:36:08:47:4b:cc:a4:
47:47:e9:74:16:30:a4:f5:1b:e3:66:b2:ca:77:6d:61:9a:8b:
47:55:23:e3:a4:d1:06:4b:b0:3d:4e:46:93:86:0c:71:b8:5b:
48:c7:b1:a8:86:a5:e6:52:c2:86:a6:20:f1:3b:32:8c:03:e1:
f5:22:12:b9:53:46:38:ea:d8:4b:9c:fc:14:07:7e:3d:d0:d7:
58:43:db:8f:92:94:c3:d0:06:5d:1c:25:34:fe:cd:b7:1f:d9:
e0:ae:69:80:f8:f7:85:41:b7:e7:ac:31:d3:96:30:48:f0:15:
cb:2f:f4:67:59:46:a3:00:7c:18:e8:73:ae:09:7a:cf:7c:85:
21:0a:52:65:d1:30:d4:3d:0e:8e:38:34:08:d4:65:81:07:13:
65:c5:85:0f:aa:73:3c:55:4a:1d:0c:7c:dc:55:44:db:8d:f2:
8a:d3:ea:5c:90:64:f2:09:9f:ab:b7:52:d8:63:e4:c5:53:f8:
d1:ee:b1:1e:e2:4f:8a:f1:3f:ab:62:d5:7a:d5:6b:75:ba:cb:
c6:e4:ad:13:b4:e7:72:3e:2a:36:70:65:69:4d:9e:b4:a4:80:
1e:c7:a9:07:ef:be:1d:8f:48:1b:e3:17:d2:4a:ab:f0:37:fe:
c6:9b:c6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:52 2025 by rpki-client