Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: /L+oWHGPkwU+j7cuwnEsJCxf8yp6N4dLUAGUzj1t7sg=
Subject key identifier: B3:41:79:5C:1E:81:30:A9:6A:2E:53:8F:2E:04:DB:7D:C6:AD:58:1E
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 01987D1C54A036180591DB3CC6CCED7DBEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 1040
Signing time: Wed 06 Aug 2025 02:01:05 +0000
Manifest this update: Wed 06 Aug 2025 02:01:05 +0000
Manifest next update: Thu 07 Aug 2025 02:01:05 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: FNh916XptohuCic/teiNw4BRWS2HbW+2dN6RT6lW1Y4=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:54:a0:36:18:05:91:db:3c:c6:cc:ed:7d:be:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Aug 6 02:01:05 2025 GMT
Not After : Aug 7 02:01:05 2025 GMT
Subject: CN=b341795c1e8130a96a2e538f2e04db7dc6ad581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:3f:13:e8:68:58:7c:b4:fc:1b:99:67:01:
c5:fe:b6:30:f7:08:4d:19:8b:a5:1a:d4:eb:0a:04:
db:06:57:84:54:d0:e8:e4:49:73:74:91:87:72:63:
45:51:49:05:c3:72:f4:88:01:a2:e6:1e:e9:90:af:
79:af:61:59:7f:21:e3:c1:4e:94:2b:01:1b:46:92:
d6:31:ae:0f:bd:2a:0f:1f:f8:3d:1f:5a:b7:c8:da:
8e:ae:5d:76:3e:c1:5d:34:16:ff:02:7b:48:c0:b1:
2e:c8:f9:74:23:95:15:30:28:cd:45:6c:65:f3:89:
f4:e9:47:c6:78:17:1b:40:32:ac:d7:7c:e9:8b:ed:
1e:1f:f9:23:52:e4:4c:53:34:88:f6:3a:59:9c:b2:
ae:fe:6d:b0:55:b8:f6:54:44:d1:c2:25:48:aa:15:
67:a4:60:2a:18:cf:5c:1d:c2:f9:6a:f7:58:16:4f:
e3:c0:6b:b0:d3:44:eb:e5:47:1d:63:48:77:bc:f8:
c3:59:cd:d3:c7:4e:92:7a:5b:b5:14:32:e5:fa:8e:
d9:71:a1:92:2e:cf:a3:1f:f3:0d:ed:d4:d2:90:a3:
27:1d:02:45:7f:61:e9:6b:48:76:3c:77:47:e5:8c:
fd:fb:cd:26:db:85:ad:b7:4b:98:c0:44:85:39:25:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:79:5C:1E:81:30:A9:6A:2E:53:8F:2E:04:DB:7D:C6:AD:58:1E
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:a0:a0:00:c8:9e:64:0b:f0:d8:b8:26:e4:30:96:7d:97:
1e:87:5a:e0:fb:92:7b:fa:35:7e:74:60:01:33:97:72:86:14:
f6:15:ce:31:29:5d:f0:d5:04:98:e9:b5:fa:1f:52:bd:9c:f1:
39:26:fb:85:97:3b:53:1d:b4:02:8f:aa:f2:c6:46:8a:e0:f4:
5a:c3:29:0e:0f:be:c4:f9:ae:3d:33:1d:5e:ed:d4:aa:db:6d:
68:cb:05:30:37:cf:b6:87:ef:e1:6f:be:07:84:06:35:77:b4:
93:f7:81:1a:63:aa:5f:00:96:48:ca:3b:cf:d5:f4:11:5a:d5:
b8:9c:01:14:88:c8:18:c6:7b:17:83:6c:d8:1e:5b:c6:60:50:
f4:6f:2f:f3:91:f0:eb:b2:f9:db:df:d7:9b:dc:5a:a0:4a:48:
90:97:7f:93:e4:ad:02:1a:f4:da:30:84:0c:6f:ba:2f:a5:33:
fc:93:e7:89:bc:20:68:3a:d2:6f:fe:14:2a:83:57:81:45:43:
b2:4a:26:14:fb:92:34:5b:48:4b:e5:b1:0d:c6:71:5f:a1:ae:
17:9d:14:5d:74:5b:8d:b6:66:ce:ca:df:54:f7:41:8c:d2:a6:
19:13:c0:ae:36:b5:ce:31:f5:5e:dc:78:20:a7:05:60:b5:4b:
88:cb:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:08 2025 by rpki-client