Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: 9iS9oOBQVazT6XIeg+wfm3CULb152onT+6EWQ+u7eT0=
Subject key identifier: D4:13:B0:7E:FF:76:A4:B5:8F:22:14:F5:7C:A1:F3:73:F4:19:32:6B
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0198906BAF6A6AD01A6EE91C431F67C8BB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 20:00:33 +0000
Manifest this update: Sat 09 Aug 2025 20:00:33 +0000
Manifest next update: Sun 10 Aug 2025 20:00:33 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: zVwnzdJVNU8zwXdUn64w/HVZsGp8q432kDxFS25L9hY=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:af:6a:6a:d0:1a:6e:e9:1c:43:1f:67:c8:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Aug 9 20:00:33 2025 GMT
Not After : Aug 10 20:00:33 2025 GMT
Subject: CN=d413b07eff76a4b58f2214f57ca1f373f419326b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:fe:63:87:3c:98:92:0d:27:ea:a5:45:f1:
fb:5b:5a:79:66:c1:8d:b9:f5:44:20:d6:c3:52:2a:
d5:95:6d:dc:21:ab:9a:ce:cb:71:ee:74:e7:9b:08:
63:ae:3a:82:13:ec:1a:a4:50:d1:62:c4:17:f4:87:
dd:ea:3f:44:b3:c7:4b:7c:3d:ba:3f:c2:81:81:81:
95:31:64:90:08:06:1a:2a:ac:ed:b4:7a:b2:e3:2e:
9b:7c:5c:34:b2:d2:0f:82:0b:cd:15:cf:79:70:97:
5e:7e:57:68:da:cf:82:d8:6d:a3:83:ec:09:7e:ad:
14:03:6b:f2:ee:c3:82:66:b2:49:66:7f:7e:bd:cb:
fb:7e:55:e8:99:5b:d3:6d:57:4f:fb:30:40:73:28:
41:1c:2d:86:5a:61:e6:05:3f:14:10:35:92:f6:49:
bd:9b:c4:53:f0:43:ad:ee:a7:3c:e8:9e:65:88:62:
37:35:0f:bd:80:97:6f:36:ea:4b:72:d9:73:fd:4e:
4a:76:4c:55:6c:a4:e5:67:fd:08:04:af:8c:4a:27:
37:95:f8:65:b3:e9:ed:44:4c:6f:a3:63:d3:65:df:
d7:06:51:9f:7e:9b:48:b8:eb:90:20:9f:3f:3b:12:
c8:9b:cf:24:3c:f0:4e:4c:cf:62:e9:63:fe:01:b9:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:B0:7E:FF:76:A4:B5:8F:22:14:F5:7C:A1:F3:73:F4:19:32:6B
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4c:be:4b:b1:1f:cc:87:a4:23:18:54:60:d6:06:bd:e6:4e:
e3:5f:25:8b:3b:c9:96:95:cf:02:99:86:db:a6:70:ae:49:f6:
ff:5d:9a:8a:6f:0e:04:5b:cb:fc:40:49:7b:a6:f4:d2:73:5d:
30:c7:87:4d:58:7b:32:86:32:c2:1e:c6:0b:02:9a:9c:f0:b2:
98:3f:61:c9:06:5f:da:70:98:cc:18:3c:ee:7b:a5:1f:3b:23:
06:a3:ae:95:ab:ca:05:d4:0e:97:a5:4b:2a:53:d3:ec:65:63:
d4:61:e6:27:30:b7:e0:f3:fb:3e:70:90:b1:ac:ea:fb:d6:ff:
68:b4:b2:9f:c1:b5:f6:c5:85:0b:c9:cc:97:32:51:50:09:69:
43:ab:6f:fd:f9:3a:3d:ff:8c:26:92:b3:26:2b:2a:23:be:b5:
85:0a:95:af:0a:ec:35:e1:c8:64:69:f9:16:f2:b9:9a:81:bf:
66:c2:76:08:48:10:aa:c5:0d:84:5b:b1:be:b8:2f:6e:94:76:
dc:44:7b:51:62:71:e3:27:f1:00:b0:7f:04:d3:ec:18:3a:08:
c7:23:19:8f:4c:d2:5a:f4:fa:44:2e:6f:12:d8:48:cc:ab:a8:
06:b5:52:0b:b9:51:76:37:b0:25:7b:f2:17:5b:76:91:7b:b6:
64:a4:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:21 2025 by rpki-client