Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: RPFJsHDWavLD8yz6LYJlsr8MIB2Wh4u7ug6osVo9GYQ=
Subject key identifier: 52:EB:27:86:22:27:F7:3B:39:F6:11:B9:76:E0:AC:AA:F4:FB:05:24
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 01989335D1D5F702E51AC9917DB35171B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0E93
Signing time: Sun 10 Aug 2025 09:00:34 +0000
Manifest this update: Sun 10 Aug 2025 09:00:34 +0000
Manifest next update: Mon 11 Aug 2025 09:00:34 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: lOjKs5pFjmU1emkh31uPI90XBUSqFf5/A+Qo2papogU=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:d1:d5:f7:02:e5:1a:c9:91:7d:b3:51:71:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Aug 10 09:00:34 2025 GMT
Not After : Aug 11 09:00:34 2025 GMT
Subject: CN=52eb27862227f73b39f611b976e0acaaf4fb0524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:a2:42:da:a5:c3:82:6b:d8:8c:45:8e:03:
bf:13:7b:33:c2:1e:30:f4:67:2a:89:8a:48:1b:9a:
61:e1:78:b6:0e:46:ab:82:e9:88:5c:b9:1a:43:6b:
d9:cf:ea:12:6c:9d:a3:5f:c9:fa:40:c1:57:2e:89:
dc:eb:8d:26:22:f0:d4:90:b7:fe:c4:23:e0:46:69:
44:16:f8:f2:6f:93:de:28:61:2b:b0:64:7d:76:0e:
69:8c:8b:16:e1:08:50:0d:a9:1d:ac:c1:d9:24:8b:
7f:c4:ac:f6:28:b5:5b:42:d8:ef:68:e9:7a:fd:24:
04:e7:ab:80:45:84:20:35:3f:1c:08:d3:50:bb:72:
a4:73:9a:e0:5d:0d:28:e6:ce:78:1a:bb:ad:29:53:
d4:62:a3:ed:84:c2:24:b7:84:15:1a:23:5f:35:76:
ee:a7:0c:af:98:68:c9:1c:a6:1b:4f:18:fc:4e:9f:
f5:55:52:87:33:8a:ba:81:d2:03:33:a2:2e:70:62:
2d:f4:48:85:b9:2e:42:a4:7b:e4:46:58:85:30:3c:
f7:dc:81:34:49:57:28:3f:2b:83:d5:f9:c2:52:6a:
d3:cd:fc:5f:e0:ec:f5:7b:62:f9:1f:0a:49:c0:ce:
d4:46:44:2b:5b:08:71:7e:a7:2a:1f:e0:1b:07:a9:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:27:86:22:27:F7:3B:39:F6:11:B9:76:E0:AC:AA:F4:FB:05:24
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a5:06:25:86:59:73:14:9d:6d:f2:85:0f:cb:d2:5e:07:cc:
97:60:e5:48:53:7c:cc:9e:62:1c:09:dd:51:31:30:e6:13:7c:
b0:3d:d8:5d:63:27:f7:af:4b:dd:00:ef:1d:cf:15:2c:48:7e:
b4:81:d3:96:db:49:c2:ba:aa:3b:f9:0d:e6:25:aa:65:38:ac:
54:9e:93:74:69:9c:53:9d:1d:73:4d:ce:43:6c:89:32:11:76:
12:c8:b1:78:9c:f8:d1:70:5e:bb:4f:d2:fe:b6:0f:4d:b3:9c:
6e:73:ab:30:d3:b4:ec:4e:0a:00:f4:07:a2:63:16:eb:b5:e2:
f7:60:50:c1:37:a6:cd:bc:a6:55:ce:42:26:4d:82:13:b4:9f:
f2:36:f9:e5:04:60:63:dc:8a:d8:47:6b:b5:c8:61:37:e9:80:
65:97:dc:c3:f4:1b:b3:cf:b2:8f:b3:af:d7:f5:a2:36:40:64:
6f:13:e7:16:cc:39:0a:07:96:23:14:09:85:5e:8d:f8:3c:23:
26:8f:74:78:c8:67:8f:b5:8e:13:25:38:b4:0c:6c:89:3a:d3:
4c:3b:59:a2:1e:9d:de:bc:5f:4d:c7:06:8f:00:5b:30:89:96:
aa:0b:ad:2b:7f:08:3e:74:13:21:b7:0f:1a:5b:3a:94:59:6d:
7d:e9:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:08 2025 by rpki-client