Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: zYeY3rik9z+p3zHBjvI3AEtEhApL+DbZGFRwVfnOTR4=
Subject key identifier: CB:CC:72:26:64:F8:19:2E:E7:3F:70:58:A0:ED:17:76:DE:80:13:01
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 01988EEC4CA830CC4929CDE6E299898C6322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 14C3
Signing time: Sat 09 Aug 2025 13:01:47 +0000
Manifest this update: Sat 09 Aug 2025 13:01:47 +0000
Manifest next update: Sun 10 Aug 2025 13:01:47 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: f9VM6zoqjBQhjUMhfG0DPlzsrtHgFYczRVL41KKVgY0=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:4c:a8:30:cc:49:29:cd:e6:e2:99:89:8c:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Aug 9 13:01:47 2025 GMT
Not After : Aug 10 13:01:47 2025 GMT
Subject: CN=cbcc722664f8192ee73f7058a0ed1776de801301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:38:d4:ca:cd:58:43:dc:15:bc:ac:83:a5:
0d:32:00:82:79:e6:8e:fe:9a:84:94:6c:63:85:0d:
8e:ee:91:bd:a9:8a:39:fe:12:36:65:38:02:b7:d4:
a2:ff:83:16:e5:04:c5:0a:c9:3e:fc:99:5f:9d:54:
ca:a3:d5:c1:f6:26:10:4b:a3:82:19:a5:74:4c:ca:
b8:7d:c3:93:0d:1f:ae:be:dd:96:a2:7e:50:6f:0a:
57:25:eb:37:2d:9c:1e:ca:f7:1d:eb:d4:61:f3:82:
94:f2:4f:06:82:cd:06:a9:b7:5a:5c:a0:bb:1e:3f:
36:73:74:70:78:64:04:0b:fa:77:9c:43:7d:ed:80:
80:e7:0c:4a:b4:6d:0b:1a:81:99:4c:a7:8e:ab:48:
6c:e2:09:55:b2:32:c7:72:73:c4:ba:ff:4f:68:37:
30:3f:fe:7a:af:59:8a:c3:77:b7:50:ea:d8:60:3b:
30:a3:be:d5:b5:9f:6d:bf:93:ca:0b:a6:ae:ea:00:
c7:5f:68:a8:b1:c6:4b:d8:74:6e:5f:ee:81:eb:bb:
01:24:38:3c:e6:86:83:d3:44:1f:47:be:3e:65:25:
1f:d7:ff:86:a5:4a:72:8f:40:da:96:5d:ec:d3:85:
f0:23:ea:dd:8e:80:57:b6:b0:d9:26:38:0f:aa:5c:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CC:72:26:64:F8:19:2E:E7:3F:70:58:A0:ED:17:76:DE:80:13:01
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2f:b5:51:85:c5:ee:42:ff:3b:72:d0:57:20:e2:27:72:f8:
5b:61:1b:a6:b5:f8:0c:66:27:65:74:0b:de:a3:5b:7f:bf:1e:
64:d1:06:45:b3:dd:12:76:b4:bd:66:3d:18:da:1a:de:76:e3:
a8:16:51:f2:99:22:42:32:0f:11:25:a9:d4:cc:0b:4d:43:59:
78:49:26:97:47:94:5e:fa:d3:51:a2:ee:88:14:6f:fa:0b:79:
4f:11:a1:fb:a5:96:d7:f3:bc:73:b0:d6:12:ab:88:4e:48:a8:
12:2a:f1:b7:6e:78:a3:c1:c3:57:12:37:c2:25:5c:da:7a:99:
9f:b5:43:1b:13:fc:7f:da:13:a0:fc:a3:97:a3:97:f3:00:d0:
6b:84:de:af:46:86:f8:2c:9a:71:bf:89:b6:eb:57:44:84:32:
a2:e6:dc:d4:b3:4a:2b:88:2e:cf:cb:3f:0f:f6:44:b8:37:12:
eb:3e:13:7f:9c:3d:48:b1:e3:26:03:0b:05:36:c1:f6:1c:1b:
97:7f:2c:60:84:b3:40:1b:fb:89:2a:6a:e1:d6:b8:a3:08:7d:
d9:d5:83:df:be:0b:6a:53:1e:64:6b:02:7e:83:26:ec:3e:dc:
32:af:d8:3e:f2:42:3a:82:e9:fd:19:20:23:9a:da:42:98:3f:
57:e5:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:53 2025 by rpki-client