Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: 91e1DHfMb2ukG4icIKiI665BNv9hqPxJbnpGwtIHTM0=
Subject key identifier: 71:37:C9:00:DE:D4:74:95:3E:72:80:6F:D7:29:9C:6D:5B:FE:7E:15
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 01987374083BA0FD03BAFA8E3D7DE296D557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 0791
Signing time: Mon 04 Aug 2025 05:00:40 +0000
Manifest this update: Mon 04 Aug 2025 05:00:40 +0000
Manifest next update: Tue 05 Aug 2025 05:00:40 +0000
Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: nxdWizsmhr+yXEvH5ZwWguSrLRT7akctXsoRBxmB33c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:08:3b:a0:fd:03:ba:fa:8e:3d:7d:e2:96:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Aug 4 05:00:40 2025 GMT
Not After : Aug 5 05:00:40 2025 GMT
Subject: CN=7137c900ded474953e72806fd7299c6d5bfe7e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:c4:39:ff:ad:20:2c:6c:90:41:15:e6:31:
be:e1:17:b2:06:65:be:6e:bb:c0:29:e0:4a:73:cf:
2e:c8:54:0d:50:8c:56:06:10:b3:df:74:2c:f0:69:
7d:04:38:c6:f9:87:e0:1c:a7:1c:63:dd:7d:80:22:
75:f5:dc:10:86:69:d1:70:4d:2e:41:ee:c4:c6:bc:
61:3a:df:22:e7:88:ac:8e:3f:75:87:ce:c0:98:d3:
47:c5:7d:3e:4a:21:2b:1b:17:dd:a0:f5:b9:55:ce:
6c:b6:39:ac:2d:77:80:ec:19:4d:36:1f:c0:08:d4:
15:db:d2:f9:71:d8:e3:b3:2a:78:eb:d8:d3:80:62:
b0:5d:db:4e:e4:74:96:35:db:d2:be:d2:3f:3a:e3:
37:f7:ea:c8:0e:21:60:30:16:f7:ad:49:72:2f:87:
ff:88:d7:3d:53:fa:77:4f:91:8e:1d:25:5c:c3:9e:
83:a4:ed:56:4a:2b:d8:a3:06:d8:d6:e6:c2:d7:d8:
83:dc:01:6c:ec:ef:70:4a:ef:f2:a9:fe:dd:14:d0:
a0:40:44:9f:c9:25:05:38:d1:f0:86:08:06:7a:42:
6a:0c:9f:e1:34:4d:25:d4:ea:0c:2f:8b:5a:80:fd:
45:41:11:0f:e1:6e:b8:d5:e8:fc:4a:b4:ef:e6:11:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:37:C9:00:DE:D4:74:95:3E:72:80:6F:D7:29:9C:6D:5B:FE:7E:15
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:40:68:27:21:f3:f8:47:52:51:4d:58:8e:3a:52:66:06:
9a:12:2c:b8:4b:da:fd:ec:80:ba:89:0c:4c:1b:be:c9:f9:c5:
ab:27:67:73:31:01:3a:c4:fc:be:6e:c4:eb:4c:ad:35:38:17:
2e:42:15:1b:9e:3a:06:08:58:27:93:61:b5:56:ed:b8:49:8b:
cd:3d:fe:05:42:86:46:6e:ab:63:7f:0b:57:ed:0b:75:0c:e0:
82:e9:cb:25:f6:85:73:89:6e:a4:ae:fd:05:4e:6f:02:65:57:
8e:83:c4:3d:da:ac:38:b6:d5:0e:e8:f0:95:ff:fe:40:f8:6f:
38:d5:cb:ff:8f:76:88:12:02:f4:a0:fb:d0:7b:f0:17:da:08:
13:87:05:4d:a2:a0:34:e1:94:fd:1c:32:be:12:5e:84:e5:63:
8e:14:14:86:fb:46:3b:9f:c1:55:89:bc:df:a2:dd:de:55:67:
1b:62:b9:27:a7:52:47:f2:87:ec:ed:3c:77:15:47:bc:62:2c:
cc:4e:9f:66:05:50:10:8a:be:d4:30:02:39:25:7c:05:ae:f3:
f7:ad:dc:1d:f0:fe:f2:c0:51:bb:7e:8d:97:56:ae:f2:12:7a:
8b:e5:e9:ad:1e:04:6c:b5:0b:d1:c4:b7:ed:3d:63:00:03:2b:
cb:d1:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:36 2025 by rpki-client