Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: wlIQy0l83oBoFeTr2+ROVYko9i+nGF7HYJOb+P1SvAk=
Subject key identifier: EC:3F:F4:9F:E3:FD:21:9B:33:31:84:B1:1A:73:94:05:82:85:27:54
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 01988C8F59E5398DF812F2DB58E62086FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 12C0
Signing time: Sat 09 Aug 2025 02:01:01 +0000
Manifest this update: Sat 09 Aug 2025 02:01:01 +0000
Manifest next update: Sun 10 Aug 2025 02:01:01 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: mMX1irzj3M5GbVg8wAeEuRDs7hqvvPBTmxS0gn6Xz4o=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:59:e5:39:8d:f8:12:f2:db:58:e6:20:86:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Aug 9 02:01:01 2025 GMT
Not After : Aug 10 02:01:01 2025 GMT
Subject: CN=ec3ff49fe3fd219b333184b11a73940582852754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:bc:a2:01:68:66:9d:70:36:3f:57:86:01:
3d:7e:f7:19:f0:64:92:cc:f8:64:c4:01:46:c7:4d:
40:99:fc:6f:0f:b2:96:c8:ad:3a:38:0d:c8:ab:6c:
44:31:51:b7:c2:a1:1a:63:23:b4:37:27:be:e2:30:
a5:d2:b4:11:14:32:63:a1:c8:84:49:f6:4f:3d:30:
63:6e:18:c3:6b:47:47:58:8a:2b:c4:78:13:3c:2b:
8e:52:cf:08:47:bf:a0:f7:a2:51:e8:7e:b8:a9:83:
09:69:92:23:b5:73:fa:11:ab:0f:19:1c:af:c8:ca:
1f:dc:46:c0:16:65:b5:35:a6:46:04:3b:85:04:1b:
10:65:33:f3:7a:6f:10:7a:19:d6:0d:6f:ce:3a:d4:
0d:da:94:92:cd:1c:24:94:2e:47:1f:2c:6b:88:7e:
fa:78:ba:18:04:8a:90:c1:bf:84:c6:ae:88:6a:fb:
4c:7c:d1:95:1a:b7:43:5a:db:2e:8b:a1:7f:50:12:
c7:42:e1:35:cb:c5:1b:61:b0:f3:79:cf:26:db:9e:
c9:9f:bd:79:45:bf:c6:d6:71:90:5a:d0:f2:da:40:
ad:77:39:11:2f:61:9a:78:e1:4f:7a:24:00:87:4e:
23:e3:69:cb:f3:26:bc:c5:0b:b6:88:0a:ef:5a:4c:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:F4:9F:E3:FD:21:9B:33:31:84:B1:1A:73:94:05:82:85:27:54
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6b:b1:51:61:b8:eb:37:aa:28:01:b4:e4:a5:f2:c1:7d:3d:
a2:05:e3:b8:d6:93:83:8a:72:93:9c:21:d7:de:31:63:a0:56:
cf:04:62:36:a1:83:84:85:64:72:58:49:6f:07:4e:a4:14:cd:
88:59:7c:91:a1:a4:ac:9f:3d:6f:c1:e4:68:ad:21:2c:1f:85:
91:49:0c:eb:40:81:29:d8:89:2f:7a:a5:2f:97:d6:fa:75:9d:
72:ca:19:4c:dc:70:be:8a:c1:8e:e1:18:fd:ba:8c:4b:84:94:
f1:4b:66:01:59:4b:fa:07:39:b3:8e:10:c7:91:ad:43:78:aa:
e3:db:f3:0c:b6:be:f5:07:ce:bf:fa:50:72:22:f1:ba:24:cf:
e5:fd:f4:b6:01:08:b9:54:7a:48:6e:af:d0:49:13:f9:15:fd:
53:b2:7b:85:dc:79:3e:a6:d0:ac:a3:ed:bd:b5:ba:83:fe:20:
1d:c0:9e:b8:71:01:d9:54:30:be:af:51:5f:14:a9:d8:4a:c6:
0b:a7:d3:f1:67:9b:df:b7:e7:ea:b4:fd:d0:d7:1c:15:d2:ce:
72:71:93:72:94:69:a9:63:ee:25:78:02:c2:e0:ec:05:d7:36:
41:34:ec:d8:e2:7b:46:21:b6:b6:05:ca:8e:19:a5:6b:5f:0e:
12:e8:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:47 2025 by rpki-client