Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: HlKNkj+ZU4JJuCRTKFjIdWygajejmvEvSnppUAQJs5o=
Subject key identifier: 29:41:C2:7F:04:64:1A:1D:E6:5E:E9:46:06:5D:2A:E0:5E:89:F2:35
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 0198895793A19CE9FC00F790303A0E73775A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 11:01:14 +0000
Manifest this update: Fri 08 Aug 2025 11:01:14 +0000
Manifest next update: Sat 09 Aug 2025 11:01:14 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: xb5gj9e7xYWjaPfw0/zdrdo8X7hCJ74yYwMhSvX0JlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:93:a1:9c:e9:fc:00:f7:90:30:3a:0e:73:77:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Aug 8 11:01:14 2025 GMT
Not After : Aug 9 11:01:14 2025 GMT
Subject: CN=2941c27f04641a1de65ee946065d2ae05e89f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:19:75:25:e2:cb:f9:79:1c:8c:ff:e9:0f:
31:5d:10:a8:86:de:25:0c:d8:1d:1a:d7:7a:4d:f4:
13:1c:a1:c5:01:3b:08:f2:99:39:bd:81:1e:44:4f:
0a:2a:08:62:ea:6a:7d:6f:c7:d2:04:48:cf:d5:43:
bf:a8:21:21:a5:dc:ab:a3:9d:cb:e5:cf:69:f9:39:
07:b7:b6:0e:4b:f9:b0:08:2f:09:c0:73:3f:82:5b:
6e:d2:3c:a4:df:b0:0a:25:4c:0b:19:fe:60:64:2c:
f3:b0:89:1c:31:45:78:30:ab:69:ac:4e:8c:b6:55:
e4:bb:cc:36:c3:12:b4:4a:e7:e3:dc:f8:47:4e:ba:
1c:af:f9:c8:fe:2c:61:ac:f0:03:04:91:0b:81:a6:
78:99:93:b4:d8:af:17:b9:04:69:14:17:4b:bd:e1:
16:b1:32:87:95:48:81:15:be:47:da:23:bd:21:83:
76:0e:0f:45:e2:d5:de:f5:52:11:0b:f4:e3:4f:36:
67:51:fc:02:28:f3:ac:ed:67:49:76:82:0d:04:14:
b7:6f:ae:24:e3:83:ea:4b:a7:cb:c2:2c:d2:20:3d:
32:b9:db:8f:87:47:95:cf:c7:d9:79:64:e3:68:84:
a0:fb:5e:90:41:da:1a:86:7b:cf:eb:bd:5e:c3:5a:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:C2:7F:04:64:1A:1D:E6:5E:E9:46:06:5D:2A:E0:5E:89:F2:35
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:bf:8e:a2:b2:75:6b:d3:1b:c4:ac:43:73:a7:c6:86:68:
7b:0b:55:92:e3:5e:ce:4e:93:ef:56:21:8e:5e:91:43:86:4c:
2e:7a:3d:1e:2a:85:bb:e3:00:ca:d5:2b:11:8f:08:cd:19:fa:
6a:17:57:68:fb:6b:30:6d:12:b1:bd:1c:30:62:52:86:06:54:
a0:80:3c:b6:ea:59:47:ed:ee:25:2b:91:84:20:6c:7e:2b:dd:
9f:fd:fd:db:af:aa:4a:bb:fe:3b:e9:cb:c7:25:70:29:a5:30:
52:e3:91:0e:92:36:fb:d1:80:bc:00:f1:01:1b:64:97:62:7e:
ca:3e:a9:9d:e4:44:2a:d1:11:e6:ef:0d:bf:98:15:65:98:63:
40:da:2e:b7:11:09:19:9b:06:6c:d8:31:cd:5d:8d:39:b9:2a:
9c:e9:26:9d:31:23:bf:c1:15:07:59:bb:f9:66:d0:7f:1a:83:
b9:ba:c3:35:31:20:e0:de:81:e6:46:e1:59:66:c2:e5:54:d3:
b9:e0:ba:07:6c:65:e1:4b:de:23:ab:9c:36:9c:dd:eb:26:58:
86:d0:aa:60:b8:08:e6:aa:86:d3:72:b5:86:eb:72:ea:78:d5:
30:6d:99:ce:ab:37:2a:cd:92:f3:33:01:7f:0e:e3:bd:14:88:
7a:9e:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:13 2025 by rpki-client