Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: eunypyNdBVmH4p4yx3IYky2hR+iE0Ei8Ol84ibKmbdo=
Subject key identifier: FD:76:43:BB:10:65:BA:47:34:70:49:5B:89:10:73:7A:8C:C1:DD:EA
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019895C9355A67DE4F8D75800CC7B4D0FE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 058D
Signing time: Sun 10 Aug 2025 21:00:48 +0000
Manifest this update: Sun 10 Aug 2025 21:00:48 +0000
Manifest next update: Mon 11 Aug 2025 21:00:48 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: pOK6HysUJH1XZduTZ9K+a3cogr+hhqU8sMFXWBca0rA=)
2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:35:5a:67:de:4f:8d:75:80:0c:c7:b4:d0:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Aug 10 21:00:48 2025 GMT
Not After : Aug 11 21:00:48 2025 GMT
Subject: CN=fd7643bb1065ba473470495b8910737a8cc1ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:8f:17:93:46:da:da:91:86:64:97:dc:9e:
16:96:6d:02:91:fa:99:b7:71:77:b5:0a:7f:80:b8:
89:1b:75:4a:d2:d5:80:f8:34:d6:45:a4:d8:8a:4b:
bc:6d:7f:4e:8d:a6:7c:ad:58:07:89:ee:9b:67:50:
a4:2a:5e:55:45:3c:43:48:fc:8d:9f:3a:2e:2a:86:
3f:7c:f5:f5:b5:a1:4e:57:3d:14:3f:c0:86:9f:21:
05:e5:9b:f3:26:e6:7f:e9:15:b3:b0:27:ba:7a:d7:
f9:da:1e:0f:f3:de:f9:f5:f9:f2:d0:c9:3f:a2:c3:
79:e0:9c:b0:0c:87:9b:76:f5:5c:24:5c:0d:0c:ef:
b3:ca:98:1d:89:d5:ce:e5:5b:41:a4:aa:af:a6:78:
ba:b5:70:3b:f6:4e:be:57:1e:07:9f:d1:f9:68:5c:
c1:66:48:89:84:e2:03:66:6d:d7:02:9a:41:d4:ca:
59:c5:65:b1:c2:6f:0b:a9:a5:7f:e2:c3:f0:cc:37:
82:d0:9d:2a:63:83:10:a2:5c:ab:bc:44:09:7e:d6:
29:a6:06:8f:d3:59:5e:85:20:28:ee:71:64:16:a4:
8c:e0:1e:88:7e:84:86:17:e2:50:97:9f:6b:26:a7:
11:4a:ee:49:de:76:a0:f4:8b:d3:89:af:aa:31:15:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:43:BB:10:65:BA:47:34:70:49:5B:89:10:73:7A:8C:C1:DD:EA
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:4a:f9:5e:28:c5:8f:f7:73:62:c6:20:ad:ae:df:cf:83:
5d:26:c5:63:8c:65:68:43:e4:3f:36:c6:5c:d2:ce:a4:b1:26:
00:72:39:6c:4b:93:7d:7e:b3:f4:04:f4:c7:b1:9d:dd:47:5c:
a5:23:82:d7:a6:c5:26:97:02:3c:ff:cb:77:bb:71:39:93:b5:
d7:e6:41:4e:d4:24:83:3b:63:d2:a0:c2:d6:f5:b8:b1:1d:8c:
25:02:92:50:6e:fd:af:54:38:09:dd:f8:ad:77:5c:cb:1a:d5:
06:67:81:66:b0:83:52:b5:b2:9e:c6:11:f3:de:1f:61:c9:fb:
5f:1a:98:cc:dd:46:1e:c0:05:25:25:18:43:87:97:03:6d:01:
c2:6f:c0:65:62:74:28:97:db:65:50:3a:6a:31:61:ac:33:8d:
50:9e:73:bf:69:09:ee:1f:9f:13:38:95:91:24:04:e7:b4:2e:
a5:07:c2:32:9f:58:69:15:70:9e:cd:46:1f:d9:38:e1:31:75:
05:5b:41:22:fd:ce:13:69:97:07:af:dd:f0:09:7d:92:3c:44:
73:74:75:81:00:a2:aa:3e:56:de:e9:28:f7:31:36:0e:c8:e0:
13:a0:0c:dc:b6:a1:41:f3:51:3b:f6:6a:27:d4:62:3f:2f:48:
69:bf:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:44 2025 by rpki-client