Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: BEp/MsRfygHc1zICE4qRdLoS7h7+8deaOTu9t6WjoPI=
Subject key identifier: 22:80:35:3B:78:23:C7:B4:E9:53:69:1C:C0:57:C0:21:3F:7B:EC:4B
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 01988BEA597CDECC263E8528AEC6833CB8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0C11
Signing time: Fri 08 Aug 2025 23:00:47 +0000
Manifest this update: Fri 08 Aug 2025 23:00:47 +0000
Manifest next update: Sat 09 Aug 2025 23:00:47 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: l0PJ2qt3MFjlUMpFBuUx1+BG3EuJVVHOzufYURvMKPE=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:59:7c:de:cc:26:3e:85:28:ae:c6:83:3c:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Aug 8 23:00:47 2025 GMT
Not After : Aug 9 23:00:47 2025 GMT
Subject: CN=2280353b7823c7b4e953691cc057c0213f7bec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:28:de:71:96:f4:b2:39:75:4e:55:cc:9d:
79:15:fc:2d:b5:0c:96:81:29:bf:20:f0:59:9a:d5:
98:6b:22:ab:e9:e4:94:fd:0b:43:5c:bc:28:90:d9:
41:52:1b:1d:16:00:a8:60:04:7e:eb:b3:a6:69:d8:
9f:2e:d1:bd:3c:61:56:18:97:10:32:9a:86:b4:5c:
6c:85:e0:73:0b:ec:cf:de:3f:b6:78:da:cf:71:ee:
d1:60:aa:b5:00:84:0a:f9:4f:a3:de:10:ce:4e:79:
59:8e:ae:1e:d4:0b:a2:b1:7d:8d:bb:dd:11:4e:bb:
10:91:bb:24:4b:1b:46:fb:09:e8:d8:f3:2a:09:44:
98:a4:64:80:f3:20:e6:95:bc:76:3a:1d:8d:1c:dd:
68:32:4d:c6:9d:8d:5b:71:8a:ad:d3:07:39:22:f6:
b4:0b:e8:92:57:57:d8:77:c7:a1:ad:4f:5c:cb:54:
90:3b:d9:14:a5:52:3b:24:96:35:e4:24:8a:c2:37:
93:b5:c6:be:11:a3:c2:cb:6c:47:c8:3f:fa:f3:91:
40:be:9c:f7:a7:a1:7c:d8:26:43:9b:a9:9f:d4:b2:
67:47:85:70:56:40:c9:3d:1f:bb:67:a6:f8:33:a1:
ff:df:fa:c7:28:b4:15:cf:56:3d:d8:3d:51:50:83:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:35:3B:78:23:C7:B4:E9:53:69:1C:C0:57:C0:21:3F:7B:EC:4B
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:76:98:fc:c5:73:42:73:9e:93:b6:4d:a3:20:99:fd:b6:
91:38:58:2f:22:18:4c:8b:9e:48:3b:44:e3:ff:60:0c:6b:bc:
26:39:58:74:1e:58:8e:ff:78:76:86:9b:eb:8e:da:25:72:7a:
36:82:bc:81:d4:da:2b:96:ae:fe:27:bb:85:d4:44:10:dd:0d:
d7:a0:29:ee:86:86:df:8e:02:02:a8:4c:42:7e:85:32:60:de:
46:c2:1e:d9:9f:31:7e:91:35:71:50:75:8b:f3:9c:74:a9:b5:
ff:88:ad:04:1f:17:ab:9c:00:84:e1:f0:0f:b7:0c:f9:ce:de:
03:95:e3:7b:92:15:41:92:45:55:12:f7:f9:cb:f8:22:8b:ec:
97:23:7b:52:6d:34:a9:bd:a9:85:2e:b4:b4:43:64:0d:22:37:
3a:b5:53:7c:8b:2c:41:cd:8a:1a:cb:0a:a3:bc:70:be:2a:4f:
6d:af:f6:3b:7b:45:03:19:35:72:c1:11:72:8d:24:f3:15:5d:
fb:ff:13:a4:02:b8:de:ce:c6:11:a8:4b:d1:a1:e3:aa:dc:8a:
51:d4:d8:6a:93:d1:e9:e0:ba:63:df:b2:56:e4:4a:41:d2:7f:
34:f7:f2:14:e6:1e:c8:ed:8c:ef:bc:65:65:da:ee:42:43:ef:
0f:ff:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:32 2025 by rpki-client