Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: jJJlDc/U05cfjT9wMYJ3EardSy2yNKWEDDvWOithYBA=
Subject key identifier: 4C:59:C0:03:EC:0E:3A:7C:25:04:D2:7C:43:28:A1:71:58:8F:40:FF
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01992BFDB8F57C4ABBA5EFF32E909F8DA0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1680
Signing time: Tue 09 Sep 2025 01:01:12 +0000
Manifest this update: Tue 09 Sep 2025 01:01:12 +0000
Manifest next update: Wed 10 Sep 2025 01:01:12 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: FTyBqAtF6tjlBWnQc7bZRwBjkNhCeohCcMbSxGUM8H0=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:b8:f5:7c:4a:bb:a5:ef:f3:2e:90:9f:8d:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Sep 9 01:01:12 2025 GMT
Not After : Sep 10 01:01:12 2025 GMT
Subject: CN=4c59c003ec0e3a7c2504d27c4328a171588f40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:c2:8c:16:9b:08:f0:8a:5c:0b:41:62:d3:
68:25:7d:8d:aa:d4:55:9d:b6:fc:84:2c:a7:61:d1:
f1:78:95:0e:0d:eb:c0:fc:a8:ac:f9:13:93:68:1d:
5b:f5:c0:b8:24:7c:82:3c:90:bf:71:82:97:51:28:
87:1e:81:1f:83:11:b5:76:1a:98:84:a4:cf:a5:da:
98:38:24:5e:80:77:d4:55:05:12:59:aa:40:6a:03:
df:54:91:22:7f:d0:d1:5b:e4:57:8b:51:9c:00:ab:
0c:6b:43:fc:de:35:25:97:90:a5:c0:84:97:67:ba:
2e:50:f2:86:1b:74:62:9e:cb:c5:bf:15:51:76:a3:
03:79:c5:19:7d:a8:5c:1f:ee:55:93:15:0f:01:48:
be:bc:b5:b0:27:bf:b7:16:6c:6b:bd:76:48:b2:8f:
ea:7b:b6:c4:4d:8f:7b:58:ae:ea:e1:2c:cc:28:8e:
d1:bd:f5:ee:6a:ee:5d:f6:74:f0:a1:57:c0:d6:e2:
d9:0d:ce:94:dc:f2:8c:df:73:3b:06:0e:46:f8:66:
97:7f:f9:ed:74:07:93:7b:33:3e:5c:b6:70:45:a3:
c2:db:0c:1e:56:36:bc:94:21:f2:36:87:a3:39:7e:
64:45:43:81:2c:3c:33:27:b5:95:ff:ba:21:1c:2f:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:C0:03:EC:0E:3A:7C:25:04:D2:7C:43:28:A1:71:58:8F:40:FF
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:18:be:8b:ff:5a:90:9c:8d:c6:2d:7f:7d:62:99:d5:9c:a7:
4c:e9:7e:20:bb:39:b4:03:7b:bf:89:ce:3d:af:92:d4:d3:c9:
64:8f:82:cb:70:4e:3c:0c:31:6b:53:2c:1d:19:a3:1e:f6:98:
5d:0d:9f:4d:b3:51:8c:20:aa:71:db:78:40:2c:1b:4b:79:a3:
9f:d6:a5:45:91:ed:75:f9:94:a1:ac:39:f4:24:f4:93:9a:78:
93:9a:5f:ce:ab:c8:dc:2a:7b:de:c4:87:da:3e:6e:7c:21:52:
cd:58:0e:ff:a7:ac:c5:ee:72:93:32:19:ec:90:6e:31:a0:4f:
c9:6e:2f:ac:79:d2:38:24:8c:9c:f3:5e:f5:fd:18:69:8b:9d:
57:34:b7:f9:18:3e:de:92:06:ac:45:ca:26:ee:0f:a6:8b:cb:
dc:a8:75:73:d4:fb:e2:2c:d4:c5:6e:5d:f3:50:e7:0e:a6:3a:
56:20:3e:a2:32:fe:3e:6c:6b:64:02:b0:4e:42:5e:35:19:29:
d3:9d:24:73:3e:58:9b:9b:ce:c9:4b:8c:c6:1a:67:de:01:68:
e1:11:2e:ba:59:4b:ba:69:7e:5e:09:fc:57:09:51:4d:bd:c4:
f6:60:03:48:c0:7d:fa:30:9f:29:b7:ec:50:ee:d9:98:59:70:
eb:1f:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:01:06 2025 by rpki-client