Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: tC4u7m5RQwbrNt/GZqS1KAEdHsphG+TIBhb2pUKjacg=
Subject key identifier: CE:19:5B:69:19:49:3A:2C:68:BA:0B:C4:4F:EC:C1:8A:C6:93:DA:FA
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 0198971373864CA25481F31B2A7A9126325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 1071
Signing time: Mon 11 Aug 2025 03:01:30 +0000
Manifest this update: Mon 11 Aug 2025 03:01:30 +0000
Manifest next update: Tue 12 Aug 2025 03:01:30 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: DOdlRsfqk+AeR5sWaUCjvFgQxDvxkfGCoeYQ/YR9Fe8=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:73:86:4c:a2:54:81:f3:1b:2a:7a:91:26:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Aug 11 03:01:30 2025 GMT
Not After : Aug 12 03:01:30 2025 GMT
Subject: CN=ce195b6919493a2c68ba0bc44fecc18ac693dafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:bb:3b:b3:1e:11:5e:e1:6a:3f:b2:38:28:
38:6b:aa:77:8d:22:1a:22:97:03:e9:a0:fd:18:84:
95:fe:40:ee:00:9b:3c:b1:e0:ab:98:3d:46:cc:c0:
91:95:22:05:0b:5b:ea:53:6d:58:db:b9:dc:33:6a:
4e:6c:7c:6e:d9:08:58:e8:af:bd:e5:81:1c:22:f8:
93:f4:5d:8f:15:a8:99:6f:2a:c1:6d:b8:af:23:b9:
27:bc:24:80:de:b4:38:b1:6a:64:8c:b5:ee:3d:73:
48:39:63:a8:18:66:c4:a3:8b:f4:78:fa:99:40:c7:
00:15:1d:e3:04:2a:b4:77:4c:3b:a4:7a:28:6b:6b:
c5:78:6c:fc:7f:7e:b8:a9:69:c8:f5:0b:00:9e:4c:
24:bb:24:1b:6b:d0:d1:67:a4:95:ec:f3:5e:3e:50:
86:83:38:61:25:46:86:d7:d0:00:02:0c:76:78:12:
57:8a:76:06:48:f6:e8:94:35:3f:0f:19:a8:6c:0c:
d9:79:6a:54:31:21:9a:a9:ee:4e:87:8c:e1:d6:7e:
10:c1:c9:ea:2e:64:e9:92:14:61:22:3d:92:58:10:
2e:01:17:56:ad:ae:b8:a8:1a:3f:fb:9b:9b:ae:64:
d4:e9:b5:5b:aa:0e:4a:df:60:98:8f:52:13:9c:3a:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:5B:69:19:49:3A:2C:68:BA:0B:C4:4F:EC:C1:8A:C6:93:DA:FA
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:e4:a7:77:64:cc:36:1c:69:d4:11:9d:b9:35:48:01:38:
7c:fc:35:aa:58:bc:d8:bd:ab:98:54:d9:6c:18:f2:e7:ee:e4:
47:f9:69:19:45:6f:62:b9:67:1f:30:8c:40:3d:50:01:92:78:
0c:da:a8:20:05:17:f2:59:f2:0a:b5:df:1f:6f:1f:62:8f:86:
61:21:5f:ab:ee:8f:9e:98:ab:d8:aa:ba:3f:85:14:71:1f:35:
38:ba:19:1a:e6:6c:67:d5:e0:4c:71:6c:02:26:e4:27:36:3d:
fb:cf:d6:06:93:06:d2:51:d1:75:c0:7c:43:f6:b5:28:52:d0:
2d:cc:26:84:f3:39:6f:16:c3:b4:dc:00:49:eb:8c:60:0f:14:
95:0b:b4:25:f9:fb:27:b0:10:30:ca:9f:46:e8:66:f3:e2:d4:
38:33:f5:52:2f:63:33:7d:23:2a:5b:fb:41:31:62:d5:62:4f:
39:b7:45:a1:20:90:8d:08:10:73:1a:d1:a0:64:8d:7a:7b:86:
22:af:4d:f0:d0:76:3d:d1:fd:f7:eb:b6:02:9d:ff:63:0f:e6:
16:58:26:41:20:47:3c:e7:e2:80:61:0a:4f:11:14:67:64:bb:
74:98:78:66:92:49:3c:a7:25:ec:0c:3f:df:dd:49:41:85:a6:
62:be:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:11 2025 by rpki-client