Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: y+qZ099etlboDRMFO39hUFTRSwf/+wGE1xqPlnst9iI=
Subject key identifier: FB:D9:7D:A7:3D:43:2C:89:03:E5:3F:D5:8D:61:72:32:3A:46:7D:6D
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019873E233415D4364ED636A3F7B28019C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 1194
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: 5tbQwC7/v7aGzSioBIzpVNW/kcVLM3EXxwpoj83dLZ8=)
2: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (hash: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:33:41:5d:43:64:ed:63:6a:3f:7b:28:01:9c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=fbd97da73d432c8903e53fd58d6172323a467d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:b8:a9:9b:86:f0:ba:78:d3:3f:22:f0:da:
46:00:dc:df:40:e1:c7:7a:d1:5b:c2:99:23:67:9a:
29:cb:7f:69:c0:eb:56:49:0a:59:8b:e9:19:a6:8c:
b0:4c:a3:67:df:64:2b:ea:88:16:36:87:c6:7c:8d:
00:8f:39:a6:6b:ac:46:3a:47:92:41:0c:9a:06:7a:
e3:d1:50:f5:03:57:36:15:70:20:3b:65:59:e4:2c:
f7:e7:c8:2f:cb:09:35:2a:30:92:1a:44:d1:7e:b8:
32:f5:1c:21:5d:05:f6:2c:b3:55:0e:f3:87:c3:a9:
08:53:0d:9b:14:67:71:d9:ee:17:9c:22:51:42:01:
6d:a5:dd:39:2d:c1:fa:21:5d:e8:5d:09:13:6a:45:
4e:67:0f:a8:a5:57:fa:ab:93:14:3a:3a:94:c8:fe:
6a:0a:ab:4e:a3:91:73:0c:1f:eb:11:0f:6a:41:4f:
30:df:f8:57:a4:3b:6c:5b:f2:d9:4e:81:3a:e5:6f:
59:53:69:24:6a:4f:62:2f:6f:1e:2f:33:4b:71:e2:
8a:d4:5b:8e:23:50:79:60:61:5a:74:1c:9b:7d:4f:
9e:a2:b5:97:bf:28:16:6b:33:27:65:6f:c0:4e:7d:
c1:22:ca:f5:4a:15:69:dd:f6:65:56:55:47:24:73:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:7D:A7:3D:43:2C:89:03:E5:3F:D5:8D:61:72:32:3A:46:7D:6D
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:29:37:a1:89:a9:8d:0d:c8:14:f8:2a:f8:4d:94:2f:f2:
ad:be:61:0f:36:81:d8:44:77:3e:b1:d7:15:e7:67:ac:64:8e:
40:14:86:61:e4:37:fb:e8:3e:6c:24:24:ba:8d:6c:f9:dd:83:
77:18:78:c5:5d:43:66:29:00:7d:f6:17:af:4c:2d:23:2d:36:
a8:1e:f5:98:9f:33:2c:d9:d9:e6:60:0e:b4:12:69:e5:b9:41:
08:0e:de:42:56:a8:80:5b:8c:e1:33:ea:97:0f:86:3c:eb:74:
4c:f0:f8:b9:08:06:de:3f:36:7a:57:ee:4b:f9:74:08:53:cf:
9c:bb:6b:4b:13:f8:ac:e7:f1:72:e9:2b:a4:46:5b:f0:1e:7c:
23:00:56:1a:0c:ba:5b:15:f8:a5:91:17:5a:67:b8:22:16:5f:
51:52:4e:94:f7:e7:03:7d:59:bf:1b:55:74:12:38:8b:c0:6a:
ed:30:82:a7:0c:a8:0b:fb:0d:b8:cd:d7:63:ab:b5:4a:ef:ed:
be:f8:28:01:81:94:d8:60:44:de:89:eb:07:7c:01:ea:76:e8:
8d:6a:1e:3f:63:80:08:af:ad:f1:26:ad:5a:cb:09:c6:a6:90:
25:be:9a:56:42:01:c4:4f:df:39:95:bc:1d:6c:d8:70:32:4c:
72:3e:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:05 2025 by rpki-client