Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File: OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier: xfO7g4TluwAUnxxB0DKBLLInh1pUK1WEJ4ZWVXeVi6k=
Subject key identifier: 0B:BC:0F:95:2D:4F:0F:1D:A8:44:B1:64:D4:F4:78:4D:93:42:A0:F3
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer: /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial: 019890350EDA3C50CBE9CE7652BFDC34129F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number: 0837
Signing time: Sat 09 Aug 2025 19:00:52 +0000
Manifest this update: Sat 09 Aug 2025 19:00:52 +0000
Manifest next update: Sun 10 Aug 2025 19:00:52 +0000
Files and hashes: 1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: 9Tr1HhH+TGRwRR15VTe+szSZcRo725spWMvtD1ujcik=)
2: _QTwS8nAMSFeKK0ZzzPsIxYgPqo.roa (hash: Q/O46iBV3y1aR3ABGTzdA2RTNwov3wLVP1w6lO4+h/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:0e:da:3c:50:cb:e9:ce:76:52:bf:dc:34:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Validity
Not Before: Aug 9 19:00:52 2025 GMT
Not After : Aug 10 19:00:52 2025 GMT
Subject: CN=0bbc0f952d4f0f1da844b164d4f4784d9342a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:fb:2b:2f:55:c7:eb:ec:48:0e:69:de:6c:
7a:ee:08:6f:e8:3b:4d:cd:50:a4:78:b5:ed:e5:18:
09:30:78:51:eb:d1:d8:85:8a:5b:d7:99:07:88:a2:
ca:ed:3c:b5:21:2b:65:97:d4:64:7a:89:12:85:4a:
fb:fc:8d:2a:01:16:55:74:1e:62:a4:59:ba:b6:da:
6b:8d:ca:ee:7b:63:45:57:5d:7d:29:c2:8c:5d:20:
c9:fd:16:3c:89:c8:39:00:d4:88:d8:d6:16:95:eb:
24:d0:82:2a:84:2e:c9:a9:5b:1c:3b:35:e0:ef:69:
04:89:2f:75:b3:97:35:33:0e:b4:d7:01:0b:a9:51:
d9:a0:02:cc:5a:38:60:f4:d5:0a:5b:49:fc:56:38:
05:46:49:b8:dd:ae:64:6f:8b:28:ae:58:0e:41:f4:
0d:cb:ef:8d:65:c5:0a:9d:63:8b:08:77:e4:8b:a1:
57:b5:7b:3e:41:15:55:97:b3:1b:d5:78:aa:0a:71:
82:40:ac:9b:e3:0b:a8:8a:4e:24:0b:d5:1b:8a:cf:
25:af:7a:89:9e:34:3c:99:e2:a1:ea:ea:54:a8:57:
b5:12:fc:f1:38:33:a5:f7:42:1e:93:5e:3f:c6:da:
7c:3a:d8:07:7b:0b:a3:83:65:5a:a9:83:cb:f6:51:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BC:0F:95:2D:4F:0F:1D:A8:44:B1:64:D4:F4:78:4D:93:42:A0:F3
X509v3 Authority Key Identifier:
keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:b4:6a:5a:c6:3a:10:20:72:8f:84:27:1b:90:10:be:2b:
08:0e:96:ef:50:16:12:3b:f1:af:45:dd:65:7d:9b:cb:d7:66:
e8:b0:51:47:9f:66:d5:4d:25:10:07:c1:6f:e7:b7:59:9f:f2:
6f:9d:a8:88:09:48:d7:67:9e:b8:92:ac:80:d6:8a:bd:f1:96:
ef:d2:76:e3:27:d3:db:57:5c:b8:d1:7a:9a:96:ec:80:c5:ac:
9c:51:2b:e6:17:d7:ba:28:f9:7e:e0:0c:67:e4:02:13:38:af:
ec:65:05:3e:05:c3:77:34:a0:bc:02:1d:95:ac:1f:8c:43:a7:
31:63:a3:60:db:0a:25:49:2d:56:69:39:ab:bc:a2:ed:68:cf:
ec:fb:cf:c4:9d:92:14:b3:15:78:41:ae:84:a4:6d:37:b9:0d:
25:e5:13:75:10:31:3e:b5:78:97:20:70:e7:af:c1:96:8a:56:
ce:84:f9:47:85:59:f9:a8:40:5c:c5:8a:01:75:97:bd:da:01:
1e:39:87:48:8f:ad:63:43:14:97:be:ef:a3:1d:bd:5d:7c:0f:
d3:95:21:96:fb:71:d6:b0:d2:7d:a9:30:53:d0:00:ea:27:30:
17:20:f0:d4:d2:6c:15:72:3c:2c:dd:2e:af:f2:e5:c4:e8:d6:
84:ee:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:48:38 2025 by rpki-client