Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: +sVyHlx+5Nne7T0im2mMfZEWa9tXADJ3s0EL6qEHkGM=
Subject key identifier: 1A:41:C6:71:BE:3D:63:D9:A4:48:5D:45:FB:25:36:4C:BD:F1:EE:83
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01988CFE2C4F0335C31669E1F4A48546DDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0983
Signing time: Sat 09 Aug 2025 04:02:04 +0000
Manifest this update: Sat 09 Aug 2025 04:02:04 +0000
Manifest next update: Sun 10 Aug 2025 04:02:04 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: B+xQreAcvTU4dygkKYCtapl10/C4lTfObEkBltF/1WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:2c:4f:03:35:c3:16:69:e1:f4:a4:85:46:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Aug 9 04:02:04 2025 GMT
Not After : Aug 10 04:02:04 2025 GMT
Subject: CN=1a41c671be3d63d9a4485d45fb25364cbdf1ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:bb:28:3c:7a:46:b1:28:cf:00:79:32:33:
59:d0:74:93:80:8d:fd:22:9b:fd:8f:21:ef:f7:e9:
f4:72:df:59:7a:2b:4b:9c:56:62:21:e2:ab:f4:43:
c1:53:1f:cc:7f:d4:b4:03:a1:40:bb:42:1d:7e:30:
35:33:8a:75:a1:c1:7f:84:00:b8:39:c8:c7:90:29:
60:bf:c1:64:84:90:df:25:94:78:47:a4:1c:ac:22:
98:51:d4:cc:30:dc:eb:13:89:6d:35:51:33:5c:71:
3c:f2:93:d8:40:e4:66:4f:d8:39:f1:8c:8d:3b:94:
df:47:4b:90:42:7d:d1:5b:52:f3:49:d2:26:e5:67:
8b:2e:72:ea:3c:fd:d6:bc:8a:86:8f:4d:7a:70:0d:
3b:83:87:1f:fa:de:01:5f:51:56:07:1a:b2:ad:b5:
48:99:38:73:f8:e9:56:0e:72:d0:a6:18:71:51:a0:
5a:56:53:dd:73:a9:7a:d7:48:76:d8:3f:66:87:dd:
ee:f2:36:2e:1d:0a:bd:ac:79:e8:3e:12:80:0d:eb:
f6:2d:ac:90:31:bd:a3:74:aa:a0:b1:cb:ef:01:30:
51:4e:9a:2d:ac:e6:01:15:fc:03:55:d8:93:11:b5:
dc:04:6b:ce:b8:71:fb:5a:24:9f:25:1e:da:6f:24:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:C6:71:BE:3D:63:D9:A4:48:5D:45:FB:25:36:4C:BD:F1:EE:83
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:60:23:51:64:9a:d7:30:e8:99:0e:66:eb:f6:5b:c8:a5:91:
10:79:51:5e:f0:38:80:b4:b5:09:77:bc:dd:ec:b2:03:58:f6:
2c:54:58:d3:82:77:f0:6b:25:3d:88:29:7c:17:5d:d7:07:8e:
03:fe:47:ff:ac:5f:e6:a1:dc:a0:46:e2:14:f1:4a:e2:d7:e9:
b0:e3:02:d7:fb:dd:f2:96:1b:22:fb:66:fd:02:91:40:06:43:
83:3b:3e:2c:59:07:24:5d:79:19:16:e5:a0:de:95:c2:7e:8d:
79:44:b4:cb:8d:f1:e6:53:f6:3e:1b:58:8e:e7:16:e8:ed:b7:
89:f7:58:3e:3f:58:2f:4c:ca:7a:10:af:59:3c:7f:74:02:17:
05:1c:7a:26:27:2b:c3:c3:c4:7f:89:b4:97:1a:ae:f3:8b:4e:
a1:f7:36:4c:34:17:30:7f:52:e9:69:92:4f:fe:95:e8:e1:9a:
b6:a1:84:72:87:14:48:63:cc:22:05:ab:48:41:10:11:b0:a9:
ce:fb:8c:08:2d:c0:5f:29:7d:a9:b9:4f:2d:71:63:eb:8b:b4:
fd:1d:ea:c2:0a:70:d5:bc:9b:08:3d:50:b0:ef:31:ca:59:b5:
05:58:7d:cb:20:04:24:dc:09:7a:91:6d:b7:6a:74:bb:d3:b7:
26:d8:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:55 2025 by rpki-client