Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: QVvSbGn8gx4GOUuFZ0pa4okv4n0ZfzMOhCjg+S/BE8I=
Subject key identifier: BB:E9:0B:46:C7:E7:E8:6F:3E:9F:66:F5:AA:EC:82:BD:F5:60:4E:E6
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01988F5927A6EAB1B2FD4BA6D23C2A9D98FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 124C
Signing time: Sat 09 Aug 2025 15:00:41 +0000
Manifest this update: Sat 09 Aug 2025 15:00:41 +0000
Manifest next update: Sun 10 Aug 2025 15:00:41 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: HnwXWZImu2n3GghcK4E5FBDS3E60qebfJH7dBAsfTsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:27:a6:ea:b1:b2:fd:4b:a6:d2:3c:2a:9d:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Aug 9 15:00:41 2025 GMT
Not After : Aug 10 15:00:41 2025 GMT
Subject: CN=bbe90b46c7e7e86f3e9f66f5aaec82bdf5604ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:c7:41:b1:af:0f:38:7a:16:90:aa:c0:c6:
a8:ea:34:46:7a:50:76:9f:bf:fc:8f:39:08:79:76:
8f:32:9a:33:99:9c:8f:4a:61:aa:fd:ad:ca:f6:65:
cf:3d:3b:60:6d:52:30:61:c7:e9:94:23:81:89:d4:
30:d7:23:15:94:2e:34:91:91:d7:b0:bf:16:3a:9b:
8b:f5:b4:a6:f1:d4:44:b6:87:4c:32:65:54:58:0c:
3d:69:a0:a4:32:aa:a5:7e:a1:e8:6e:9b:02:a3:94:
9a:27:26:66:2e:e9:27:a9:df:71:1a:8c:7c:70:d8:
52:5e:aa:32:b8:89:af:e3:6d:1e:40:9c:c1:0d:dd:
ba:4b:81:e9:5d:3b:54:16:33:dc:f1:5f:dc:2a:a3:
a0:c2:05:c1:df:3f:89:7d:a4:3a:c2:21:76:ef:a2:
73:79:96:28:02:25:b9:f4:1e:0e:4a:18:43:dc:0d:
87:bb:08:20:f4:5d:10:a6:0d:82:45:a0:a7:88:c3:
1a:44:90:0e:64:a5:95:e9:06:59:0e:42:cd:81:48:
ab:d6:26:78:9d:d6:a1:81:87:9b:96:79:73:68:e1:
75:6b:49:b4:e3:a9:43:16:64:49:1d:89:cb:39:15:
96:4c:eb:17:ae:63:a1:9d:3e:4c:17:f0:46:91:93:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:0B:46:C7:E7:E8:6F:3E:9F:66:F5:AA:EC:82:BD:F5:60:4E:E6
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e0:ec:7c:fe:86:85:d8:ff:c1:34:ce:e5:09:03:c3:c3:49:
e9:ed:04:0b:c0:6d:85:57:3f:3c:55:9e:02:d2:79:72:e7:09:
9b:b3:ae:50:10:70:93:12:6f:09:60:68:2b:b0:f2:73:47:6b:
d6:2e:c4:6a:c4:c2:2b:8a:d0:1f:10:63:bb:f8:67:c7:9a:69:
54:7c:fa:9f:cf:87:ac:63:ce:62:b7:63:ee:b0:e6:d9:30:0e:
f2:ad:ee:e3:10:a5:ff:b8:1c:8d:6e:60:16:3c:3c:8b:a4:36:
fb:1e:19:14:7e:49:64:9c:c3:d7:92:95:20:94:98:54:5d:97:
bb:4e:4d:25:34:64:25:03:30:81:ab:1b:ab:e7:ee:78:9b:f9:
07:05:9e:38:67:3c:93:54:a1:8d:85:2f:42:57:93:c6:0a:73:
84:ce:89:5f:f6:9e:13:8b:3e:e7:f7:17:b4:c6:3c:c2:e0:99:
2e:70:17:ac:f9:f0:9d:75:9b:ab:ce:60:44:77:17:d5:0d:90:
13:40:0f:e1:23:c6:45:61:1f:87:04:49:dc:8d:6c:cf:af:db:
d2:9b:9b:38:24:ad:de:d8:23:57:1d:9b:72:c3:2b:65:4a:42:
1d:b2:69:0f:87:68:17:12:40:d8:01:9f:34:70:36:43:f3:ae:
98:c2:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:05 2025 by rpki-client