
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier: HoFcGP9aPjxyNQf3BE8KiL38rdp7AbFB1XEgHOsdUMk=
Subject key identifier: 5B:D1:20:AD:4B:31:97:65:8D:C2:1A:CE:08:39:A9:F4:D3:3C:64:69
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 019872621E94DA3DD83EF46EE1207C66B92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 00:01:29 +0000
Manifest this update: Mon 04 Aug 2025 00:01:29 +0000
Manifest next update: Tue 05 Aug 2025 00:01:29 +0000
Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: GpmjKL4Tt5pq90wrb9cV61ebfrfuJZVYko4FAC5kGzc=)
2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:1e:94:da:3d:d8:3e:f4:6e:e1:20:7c:66:b9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Aug 4 00:01:29 2025 GMT
Not After : Aug 5 00:01:29 2025 GMT
Subject: CN=5bd120ad4b3197658dc21ace0839a9f4d33c6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:b8:f3:3f:18:72:41:4f:b1:b8:6c:ab:4d:
dd:ae:62:e0:75:33:00:17:f1:a3:67:22:73:11:b4:
d2:bc:f4:52:2a:bf:bf:c4:76:f3:4c:62:05:46:9b:
b0:f3:a3:2f:85:17:29:b9:35:10:c5:96:8f:e0:98:
f3:b3:c7:8b:5f:41:bc:ad:ec:7c:ff:cc:03:9e:e4:
b0:8f:4c:fe:0e:01:b9:f8:a7:30:dc:18:80:f2:7b:
0e:67:c4:4b:2a:52:49:3e:4c:7a:f4:ad:f5:e5:8f:
01:f6:ed:65:2e:80:fd:57:2d:a7:3b:3b:32:33:7d:
6f:bd:f6:35:4c:d3:d5:fa:da:d3:3d:fc:d0:e9:ad:
7f:f4:5e:3a:9c:87:37:4d:a5:f1:68:f3:d4:5b:08:
36:a6:b1:40:7d:82:a8:7c:a2:3b:a3:b5:66:77:44:
03:c4:08:79:d4:27:dc:eb:2b:ad:8a:81:5c:01:df:
87:b3:0a:48:e0:33:f5:8b:d4:d3:2b:e1:06:a3:f6:
8c:f9:e1:60:95:4e:08:30:53:ab:cc:f3:b7:87:fe:
59:f7:3e:d1:79:d1:94:ad:7a:ba:01:6b:e8:01:ce:
dd:82:2c:a5:d7:87:e6:4e:a3:7d:f8:b4:7e:1f:90:
33:3b:c1:c7:73:3a:00:75:47:d5:f5:e6:45:9e:05:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:20:AD:4B:31:97:65:8D:C2:1A:CE:08:39:A9:F4:D3:3C:64:69
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7d:28:ee:0d:4d:57:e7:3c:48:e6:56:cd:c3:4d:c2:7b:b2:
72:a3:fd:4b:b9:1b:30:94:fd:36:ef:70:5c:79:42:f2:63:a5:
b9:75:1a:f4:3a:e5:66:53:a5:c2:0e:d6:56:c2:bb:5c:1d:79:
a3:7d:69:c8:16:1e:b2:90:45:29:c2:3d:0f:0b:ec:0e:54:1a:
26:59:91:55:73:24:3a:b4:b5:40:db:3a:15:5e:06:8e:85:28:
9d:31:73:32:23:9c:fc:c5:f7:53:29:ae:90:a0:f7:af:15:b5:
bf:96:ff:a6:d7:64:fc:44:ed:d3:99:ac:53:93:4a:5e:d2:a8:
b1:11:4a:72:be:a7:07:85:08:c9:ef:27:a5:34:62:bc:33:91:
d0:3a:1d:96:28:6e:f7:98:a3:cc:f4:46:54:b8:cc:24:d8:8c:
1b:36:67:5e:b5:47:ad:13:ee:77:3e:d7:a5:f8:a1:61:f1:80:
17:e8:83:94:78:d9:85:ca:e3:ec:ca:4d:25:15:cf:b2:1d:fd:
29:e0:ca:28:1a:be:a6:fa:0f:73:a4:cd:4d:99:24:b0:fb:39:
f7:0b:70:36:00:ff:cb:b0:af:9c:6f:a8:4b:f2:d8:ec:9c:58:
98:35:60:2c:01:ae:c8:f9:3d:48:ba:0f:7d:a8:33:fd:31:2c:
4b:95:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:19 2025 by rpki-client