Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: BF6OI0aSX0LmHc+Eh1kDfVl+SVTfq1DsM7Cp17ycUbc=
Subject key identifier: 78:34:88:2D:AC:4B:47:2D:34:40:EE:7C:AD:DD:A6:11:64:E2:CC:D6
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019873068F7298C2A51CD20AF9FE7DBC35E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 03:01:06 +0000
Manifest this update: Mon 04 Aug 2025 03:01:06 +0000
Manifest next update: Tue 05 Aug 2025 03:01:06 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: Xs95DmqMjpF6DgOk+Q9/U1/2z7XoyEx2HBj/tPUIzIM=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8f:72:98:c2:a5:1c:d2:0a:f9:fe:7d:bc:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Aug 4 03:01:06 2025 GMT
Not After : Aug 5 03:01:06 2025 GMT
Subject: CN=7834882dac4b472d3440ee7caddda61164e2ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:4a:44:b2:db:19:3a:e1:95:19:88:68:1c:
a2:29:91:03:22:f0:15:75:e8:42:75:71:b9:ab:ed:
b5:ad:34:05:ec:8e:b8:71:62:7d:f7:01:f0:db:07:
71:29:ed:7d:3d:5c:8d:1c:bf:ec:51:ae:b9:c0:0b:
6f:3a:97:45:95:61:51:af:03:88:ea:30:d9:38:02:
41:f2:27:e9:43:dd:3e:16:8f:e1:f0:99:ee:8f:42:
68:c8:70:67:97:16:ca:af:2a:3a:94:aa:95:a5:c1:
e6:08:9d:9f:fa:72:de:bb:e5:98:86:5a:c7:14:6a:
e8:b9:ff:a4:f7:ef:d5:14:12:dc:5c:b7:ab:7f:80:
64:e3:71:b0:2d:69:bf:3c:3f:95:fc:b5:67:7a:1c:
44:db:84:24:0a:81:db:85:2f:31:ad:38:a4:bc:10:
c9:58:8c:37:44:0e:bc:db:b6:53:02:93:98:6d:0e:
1e:6a:0f:0b:37:8c:86:1b:ac:d8:ef:bf:66:f6:ed:
dd:26:21:9e:8c:11:7a:4f:44:d4:39:e3:29:74:37:
7b:e1:ac:23:78:5b:ad:9a:70:d0:e0:32:84:eb:fc:
fb:f7:49:c9:dd:6d:d2:63:61:29:5d:73:c0:59:43:
dc:1e:75:5e:2c:87:71:2a:17:f2:dc:45:21:e9:a9:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:88:2D:AC:4B:47:2D:34:40:EE:7C:AD:DD:A6:11:64:E2:CC:D6
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bb:bf:59:dc:bc:fe:20:a1:b0:9e:e2:5e:c8:ca:62:b2:dd:
27:d7:15:3a:e0:16:a5:d8:cf:9f:15:2c:11:62:02:44:b2:c5:
43:64:24:67:71:d8:ab:a5:66:ad:50:ca:be:87:04:81:32:ec:
e1:db:17:8d:72:e8:d7:18:92:ce:35:23:d4:9b:71:c2:d5:81:
42:f0:ca:6a:5b:0f:50:96:dc:16:c1:19:49:60:b2:69:e8:68:
84:78:25:a7:29:90:1b:57:8e:1c:0f:54:6d:48:23:c1:c2:45:
74:c4:7a:1f:68:5c:0b:39:b2:95:96:9d:36:56:e0:24:8c:d6:
e1:06:2d:cb:20:16:78:57:b8:6f:37:86:c6:99:2e:20:a6:e2:
6c:de:24:38:01:4c:b9:47:d3:c7:d5:08:80:12:64:e3:53:39:
34:f7:1d:cd:f2:8b:49:9b:ab:35:ac:6c:ba:06:15:ed:0b:33:
39:ab:c7:b7:33:9b:30:00:3f:e4:9a:9f:1e:64:d1:2c:8d:8d:
bf:85:28:ee:2d:39:4d:7b:60:24:9b:0e:0a:d4:88:e4:10:02:
50:fd:6a:11:cf:63:28:d5:8b:b4:b7:35:24:60:8f:8a:d6:00:
3e:bf:28:3d:05:1c:06:eb:70:80:0e:d2:52:96:2a:1c:db:2b:
67:48:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:01 2025 by rpki-client