Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: ojfD1LedrxFw40T/03weqwCB91Wjh7omuYwPJCyui/U=
Subject key identifier: E9:8F:63:25:23:5C:02:FE:4E:78:2E:6C:4F:6C:C6:28:F0:9D:36:0C
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0199239F25188B643BC07925C5520D9966C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0D08
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: CC0aLTBWSIe9vsmbVmfR8ROUzNOdJ0SAOnP5U2z5QM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:25:18:8b:64:3b:c0:79:25:c5:52:0d:99:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=e98f6325235c02fe4e782e6c4f6cc628f09d360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:3c:fb:ab:36:04:6e:90:b4:03:20:6c:ab:
37:4f:64:ec:95:5b:b1:d0:f8:37:a9:56:91:de:e8:
08:f0:9f:61:71:f7:92:73:1e:fe:ab:75:7d:bf:fa:
96:fb:4b:0e:f4:54:55:2b:55:14:21:01:03:69:51:
2f:a2:f4:54:db:58:7c:92:6c:4e:90:53:31:5f:38:
38:e3:3f:66:83:42:b6:55:79:c3:e0:a0:1e:50:37:
f3:b9:8b:f9:85:5a:80:13:6b:12:e8:c9:f9:ff:13:
98:21:9b:63:97:14:7a:aa:2f:ce:33:06:76:8a:f2:
e1:8f:45:20:b3:4d:6c:cd:f8:47:3c:ba:18:17:c1:
59:b1:c0:0b:a7:12:d5:d3:d4:b7:57:f5:00:73:50:
6b:8f:70:8b:20:50:57:56:8d:ae:f4:b6:8a:cf:95:
6c:56:b9:d6:39:eb:e7:5a:6f:cb:e9:43:36:92:ee:
10:ea:a7:a9:60:5c:dc:6b:e4:ca:96:89:b1:45:14:
5a:5e:21:85:03:fe:5b:f5:21:e7:df:1e:26:0a:8f:
00:a4:d2:3a:de:92:8b:3d:96:e7:8f:a8:39:0d:0b:
a0:de:5b:33:f1:01:8e:69:d4:b7:b9:f6:48:37:70:
c9:4b:48:f7:33:fd:70:5e:43:bc:85:8c:2d:20:cf:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:63:25:23:5C:02:FE:4E:78:2E:6C:4F:6C:C6:28:F0:9D:36:0C
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:c3:78:3e:49:df:2d:b6:b5:29:87:87:00:ee:fb:4d:c2:
fc:3f:8c:07:94:3d:64:85:40:67:9b:55:51:c8:66:e6:98:bb:
ca:0a:c1:8e:e7:06:76:49:5f:3c:0d:38:b5:34:af:06:fa:ff:
36:9f:23:a0:e2:e9:9e:f1:5e:7a:01:1f:fd:71:c6:ed:37:c6:
f3:9e:57:ea:5d:99:f2:94:47:cf:bd:04:c7:f3:52:f1:85:9f:
62:f1:63:d8:c9:33:bf:50:62:c6:9a:70:c4:2d:c6:e6:d0:f7:
c3:dd:ce:c9:bd:5a:b5:d1:6f:ca:99:d4:c2:e8:bb:fc:b2:72:
ca:b4:d7:eb:ac:f4:2f:7a:26:7a:85:45:16:c7:dc:6a:1c:6a:
0b:a0:6e:68:b2:a2:08:86:69:40:73:e5:e2:07:17:52:91:b6:
bd:49:bb:66:e4:f9:bb:65:58:cb:e2:05:f0:c9:31:16:08:b0:
3e:8f:7d:c3:d8:06:82:27:61:75:b7:cc:a6:3d:4d:42:40:98:
94:dd:91:1f:19:a9:cd:b1:19:03:7f:f0:b7:96:42:39:58:c8:
e1:96:0e:1e:56:f2:4a:01:74:db:52:9d:2c:9e:36:65:ee:44:
b1:d0:b2:5f:60:92:a2:26:b4:81:a6:8f:30:d7:31:7b:e8:e4:
0d:17:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:44 2025 by rpki-client