Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: NkfW6ddCkYuR1lZXQlA4TTIJMfHLmsqoQABuvh8nyp4=
Subject key identifier: 33:79:A2:70:00:9A:18:88:CC:03:FF:50:FC:6B:D0:9F:A8:D2:A3:45
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 01992330F42A0AF4F4385FAA177CB1F368AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: 6nHjC9s2q1zRtzjFYif5MOL0i4ZivAB8yFoJKR8EOlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f4:2a:0a:f4:f4:38:5f:aa:17:7c:b1:f3:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=3379a270009a1888cc03ff50fc6bd09fa8d2a345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:05:36:f0:2b:e6:64:64:f8:57:4b:fb:57:
f2:db:2a:e6:99:eb:cd:51:44:bd:d5:9d:9b:36:13:
93:3d:50:13:47:a0:bb:24:df:2c:54:71:1a:03:ae:
d0:d2:d3:ec:b1:f7:fa:51:e6:d8:e7:fb:74:e6:7d:
06:19:84:1d:c3:ac:53:f8:16:28:87:75:bf:84:75:
12:1c:ca:7f:6b:85:23:32:9f:9e:c7:d3:c4:3c:0b:
11:6e:7a:65:2b:96:c9:fc:b2:b3:e9:58:bb:e8:4d:
a6:0b:88:bf:bb:5a:15:fc:4b:bf:c2:1f:37:84:85:
de:3e:6d:4e:e8:41:3b:54:fa:1d:44:82:61:55:a9:
99:88:dd:35:fd:54:9c:53:f1:29:38:bb:b8:14:22:
4e:73:b9:40:6b:a5:c6:b9:b0:90:c3:22:2d:21:2d:
b3:5f:3c:0f:ba:ac:4d:4d:46:1a:cc:a5:6b:c0:f5:
4d:d8:d7:7d:fe:a2:e3:56:e1:bf:ee:c4:e4:39:a0:
f9:bb:fe:c0:4a:d8:72:9c:c6:95:1b:93:0b:43:86:
36:10:c3:42:b2:42:d0:2b:c9:d4:c1:c6:f5:66:c8:
55:03:2c:02:67:c3:75:97:0e:14:d6:59:de:75:ec:
c1:72:78:9d:e9:a0:e9:72:26:b3:70:99:9b:4a:b1:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:A2:70:00:9A:18:88:CC:03:FF:50:FC:6B:D0:9F:A8:D2:A3:45
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:48:da:b6:d7:4b:82:13:94:32:96:b9:ef:d2:30:8e:05:63:
24:09:c6:6d:5f:b3:40:5b:7f:00:2e:87:ef:b5:22:30:4f:05:
41:ba:46:dd:5d:6f:96:1a:11:7c:a4:6e:64:1c:29:b2:b7:81:
ad:68:31:0d:b6:04:37:f4:33:4b:59:47:03:46:f6:9c:76:ce:
d3:cc:ed:be:7a:92:42:55:e5:70:25:ca:2c:83:2c:30:03:e4:
36:88:d6:d6:3b:c1:f5:9a:27:dc:24:0b:4c:a6:8d:83:b5:8a:
b2:99:5e:5e:e1:ff:51:92:e2:db:62:a9:b3:54:00:ac:fe:6c:
ce:c1:5a:81:7b:9b:3d:44:7a:3d:dd:80:89:f1:c0:4a:ae:06:
bd:2a:f4:f4:50:56:8c:30:59:73:26:60:be:0b:17:ba:ee:a8:
a3:d8:0a:e9:2b:47:3d:10:cd:55:05:90:34:f7:00:ad:b1:a9:
4c:2d:78:4b:70:0c:eb:03:8b:05:0c:26:f0:e8:e2:2b:b6:61:
82:3a:3a:91:63:dc:50:3a:81:30:b4:38:f7:63:c0:c4:81:ea:
5a:05:d7:db:c6:4a:24:06:4c:fd:a7:b6:10:99:ec:40:6d:fe:
69:88:3f:b7:b4:2a:dc:a2:6a:02:9d:db:e1:d9:46:12:b2:4e:
c4:7d:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client