Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: 3RLVWdpJnaukdwH1gFPkEp+kiXDt9o6yewRnuvh7Ans=
Subject key identifier: 46:AA:52:26:65:2D:97:E2:95:DA:7B:BE:8C:D8:DE:CD:98:B1:D1:5B
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 01988168ABD15A1679038267A76F05D626BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:02:57 +0000
Manifest this update: Wed 06 Aug 2025 22:02:57 +0000
Manifest next update: Thu 07 Aug 2025 22:02:57 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: r8l1BkFrwj8inrppExZdTN1grPk2kA72MHX3rAES0+M=)
2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:ab:d1:5a:16:79:03:82:67:a7:6f:05:d6:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Aug 6 22:02:57 2025 GMT
Not After : Aug 7 22:02:57 2025 GMT
Subject: CN=46aa5226652d97e295da7bbe8cd8decd98b1d15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:65:73:ca:af:ca:69:e8:e3:de:5b:c8:8c:
3c:0d:69:62:d2:b2:c3:cd:14:a6:c9:17:7a:81:63:
1c:fc:53:91:c4:bb:6c:ac:31:55:f8:3e:87:14:cb:
23:91:96:45:4c:60:0f:8d:34:3f:a3:71:6d:67:0e:
a2:b9:ae:de:68:e2:e8:09:08:da:07:0b:05:cf:c9:
bf:cb:46:2f:5d:4a:12:ba:aa:2b:67:56:6a:3c:30:
11:7b:a7:fb:a8:4f:17:58:8f:db:1f:57:28:8d:8d:
7b:9c:97:f9:6a:1f:34:8b:15:39:8c:18:36:87:75:
00:6d:d5:2e:bb:a8:6d:12:3c:ca:6a:d6:b4:7f:ac:
fe:31:c9:23:4a:75:80:be:8c:14:d5:24:43:87:c3:
fa:f5:60:5b:e6:8d:35:c7:7f:1a:7d:89:e9:97:d4:
1e:f3:4b:aa:85:ae:4e:d0:46:f9:94:1e:7c:a5:ad:
ee:f8:b3:c4:e3:76:48:70:f3:c9:8a:4d:99:19:3f:
ea:53:19:ca:31:7b:8f:0c:0a:c6:64:3a:00:a3:79:
b7:01:c7:03:3a:5e:18:a2:27:62:69:0d:a1:ae:81:
4f:77:63:68:98:31:7c:20:a2:bc:af:5a:16:f8:d5:
35:0a:de:c2:5d:ca:4f:ca:6b:09:aa:6f:7e:f6:1e:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:52:26:65:2D:97:E2:95:DA:7B:BE:8C:D8:DE:CD:98:B1:D1:5B
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:e6:4c:2a:67:a7:0d:80:ed:f6:77:0d:87:1e:3a:0d:d5:
b2:4a:3f:2b:c2:57:46:5b:3a:73:71:81:46:5d:6e:96:37:41:
81:88:5e:0c:f2:9b:1c:c5:54:90:52:a3:64:5c:91:11:b6:c1:
9e:f8:b7:82:67:58:f5:bd:6d:f9:bb:34:8d:4a:04:ab:2b:6f:
2f:58:2b:16:85:73:72:0e:b8:e0:1d:f9:84:5d:02:76:f4:e7:
f8:5e:c9:ae:78:e7:26:65:6b:a5:46:a3:d9:be:c4:95:6c:71:
8e:04:1b:79:52:b3:a6:64:88:97:2b:af:ba:fe:dd:f0:59:a7:
13:20:0b:e5:aa:0a:e1:6b:20:f7:7f:d5:f8:c9:ef:02:9f:03:
b3:80:b2:ea:59:33:d2:cc:9c:5b:74:92:fc:84:91:fa:b6:26:
d2:0a:e8:c5:c6:f3:a4:8d:71:dc:54:3c:2c:e7:ad:71:79:0f:
3b:3f:b9:67:3c:a5:06:ce:89:9b:cf:ec:36:3d:d3:3f:e2:f4:
a4:4c:f9:65:3f:82:d6:17:f7:3f:ac:02:47:c1:8b:f3:79:17:
32:b4:9b:e0:fb:df:c3:6f:68:81:01:01:b6:28:7b:8d:e5:d2:
94:b3:7b:3a:5b:bd:52:e5:62:92:24:d3:d9:09:d6:f4:e9:39:
da:d6:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:56:44 2025 by rpki-client