Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: udB6ghNZfMNTCHQhw2wXxZYm2keGSmWNdGNpvJ7TByY=
Subject key identifier: 8F:A2:B9:8B:F4:FE:55:3A:8C:F2:48:A3:0F:DF:3E:49:48:97:0A:45
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01989780843B227C00329476E3B22484AE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0C66
Signing time: Mon 11 Aug 2025 05:00:38 +0000
Manifest this update: Mon 11 Aug 2025 05:00:38 +0000
Manifest next update: Tue 12 Aug 2025 05:00:38 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: ZZ8F/8Tdrjr4pB+36xzV5Ruo8CIbW9h8DscFIkR4UrE=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:84:3b:22:7c:00:32:94:76:e3:b2:24:84:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Aug 11 05:00:38 2025 GMT
Not After : Aug 12 05:00:38 2025 GMT
Subject: CN=8fa2b98bf4fe553a8cf248a30fdf3e4948970a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:e1:6c:7c:ed:4a:79:b6:c0:6b:92:1a:d7:
e0:bf:c9:28:57:31:fc:19:7a:58:f3:ad:6d:89:b3:
5a:68:e1:45:31:d3:16:1c:28:15:b7:a6:a3:f0:66:
9e:bc:dc:1d:52:84:0d:2c:09:41:54:6b:4e:eb:27:
d6:51:a6:41:a1:48:1e:5a:f4:dc:bc:bf:e2:ef:41:
50:4a:dd:62:b3:0a:2b:8b:df:30:67:cf:5c:06:42:
50:e9:8b:28:1f:b7:6c:ea:e4:e8:d1:92:1a:c5:07:
7b:2d:16:9c:71:62:f0:36:3d:98:a4:c9:4e:59:07:
d0:cc:3e:d8:44:d0:41:02:74:e8:a3:19:ff:f4:a3:
1a:a7:a7:2e:db:2e:a7:84:36:c4:13:d5:a4:88:09:
94:3d:41:d8:ff:7e:5e:01:8a:70:66:c0:90:0b:e4:
2a:07:84:fe:86:9f:b1:dd:d7:26:f7:30:a2:1c:d1:
d9:d8:f2:87:95:66:2a:af:64:91:39:76:fc:4b:5d:
13:43:30:0c:00:df:4b:27:ef:21:a9:26:a7:3f:fd:
62:32:87:65:bf:84:b3:43:58:2a:f8:9b:7f:02:28:
9e:1b:5c:ad:bc:3d:fb:10:24:dd:8d:d8:01:aa:ec:
30:cc:2c:2c:58:11:34:b7:66:c3:2b:f2:59:e2:67:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:B9:8B:F4:FE:55:3A:8C:F2:48:A3:0F:DF:3E:49:48:97:0A:45
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:9e:df:b0:ce:cb:97:b3:00:79:7f:75:29:27:95:87:8e:
3d:c4:75:1e:93:aa:e7:89:41:b3:5c:0b:30:29:6c:89:9f:84:
39:cb:ee:ab:3b:e0:eb:ee:a8:b2:a2:3b:dc:d5:af:b5:bc:e5:
21:85:8d:15:1f:2b:75:a5:05:9b:ca:96:8b:b8:76:94:ff:ed:
76:33:14:e9:44:2f:cc:5d:3c:10:73:58:38:ce:49:e8:3f:b4:
35:36:bb:d7:92:a7:d2:69:99:75:51:6c:48:0f:2f:68:b8:ca:
b1:fb:2a:78:e9:39:4d:22:f9:32:6e:bc:e6:e4:43:69:83:3d:
68:5b:f0:e9:af:60:fa:24:4c:48:39:71:bc:ec:6b:e2:f8:a8:
fb:c1:6b:0e:1b:26:3d:b5:f1:d9:6c:08:49:7f:bd:f3:6a:74:
3a:9e:f1:77:2f:77:06:03:15:ec:34:1e:9d:c8:a7:41:29:77:
fb:9a:af:ca:22:32:69:ef:55:86:8c:9c:00:8d:c3:e8:01:72:
66:a2:23:51:29:ed:f5:72:76:4e:0c:db:24:55:2a:9d:e8:3f:
8b:c5:b5:62:22:50:bc:8d:0b:53:37:f7:10:39:c7:3d:33:75:
3f:9b:dc:2d:fd:09:36:25:02:ea:81:97:bf:b8:db:e0:eb:5a:
39:5d:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:19 2025 by rpki-client