Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: M3q/Q0OFlL6WzW3xDiWE92+VRY0OTUUJoUvhiG8jZrk=
Subject key identifier: EE:C2:C9:D0:44:8A:5C:B7:6C:00:3A:A2:B0:F2:A5:93:53:68:71:0C
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01987418D0D5AB2A3E9468B925C4B5F72772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0267
Signing time: Mon 04 Aug 2025 08:00:39 +0000
Manifest this update: Mon 04 Aug 2025 08:00:39 +0000
Manifest next update: Tue 05 Aug 2025 08:00:39 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: ZCr/A0BgSUVFF35/LOeuylsykHeNpzoXPF9JAlEslPs=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d0:d5:ab:2a:3e:94:68:b9:25:c4:b5:f7:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Aug 4 08:00:39 2025 GMT
Not After : Aug 5 08:00:39 2025 GMT
Subject: CN=eec2c9d0448a5cb76c003aa2b0f2a5935368710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:69:73:e5:82:ba:08:c0:b2:be:55:c6:8b:
40:d2:86:1f:28:cd:8e:cf:6f:8c:d0:13:1a:b8:80:
22:16:75:d1:19:c0:e5:5a:01:58:1c:82:76:4b:66:
01:50:ed:dc:24:6c:d8:47:03:08:89:5a:03:34:16:
7b:03:ac:db:b1:c8:95:f7:f6:98:20:56:a1:43:93:
df:11:65:df:47:f8:9e:9d:ec:bc:89:90:cc:b0:ba:
9c:75:d4:2a:36:eb:31:32:42:07:28:bc:5b:66:9a:
ae:01:b5:89:ec:30:3d:70:f2:2c:10:c2:fb:6b:e5:
68:21:d8:32:51:9d:57:09:6b:3b:ef:67:41:2b:1b:
1c:10:10:5c:df:9f:a0:9e:4a:72:de:95:c5:02:22:
fd:4d:0a:b7:b1:a5:a0:d4:09:f5:5f:54:68:81:a3:
bd:4b:54:75:3c:4c:26:61:f9:14:64:04:72:57:3b:
36:c3:0b:e0:4c:ac:39:35:7e:1f:24:7b:df:01:95:
e6:30:87:05:88:9a:41:9b:87:ce:22:6d:a7:57:cf:
6b:52:3d:b8:0d:af:9b:c1:21:20:11:9a:95:73:0a:
47:7c:34:ab:fa:d7:a7:e8:8a:b1:0b:98:63:8e:9d:
fc:12:3d:1a:ea:2a:36:f9:5a:58:e1:1b:66:b7:4c:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:C9:D0:44:8A:5C:B7:6C:00:3A:A2:B0:F2:A5:93:53:68:71:0C
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:63:79:be:d9:f3:8e:fa:d7:74:90:26:14:dd:f7:74:b2:9e:
38:7f:2c:39:21:9f:56:71:f8:6e:b5:d6:b5:1e:c1:a6:0a:48:
8d:6e:a0:13:78:e7:a0:96:9b:70:b5:bb:f7:66:06:9e:43:35:
c9:e3:72:96:c2:11:3e:a9:c3:e1:ba:10:0a:67:72:b4:e5:4b:
05:e7:41:22:74:c5:2e:f2:33:5d:fd:d9:8c:e6:ad:be:0c:a6:
0b:69:a3:65:dd:b1:09:55:2e:72:40:1c:11:e7:a1:de:f8:69:
b0:4d:74:8a:18:7f:e7:72:70:9d:60:b0:bf:6e:22:33:c5:15:
f3:d5:06:ee:45:01:99:14:70:d6:25:ce:d1:ba:8a:9c:c9:b0:
16:0d:39:c1:19:0f:b7:19:2f:8b:d2:f5:76:8b:5a:b9:b4:a3:
a1:93:e7:a6:05:b4:92:c9:fc:4c:23:05:ce:91:c1:30:17:2b:
87:b9:7c:51:45:34:66:d9:47:82:74:77:07:f3:04:43:81:0f:
69:9a:3b:ef:52:dd:92:46:6a:ec:9b:b3:79:b4:14:50:1e:1b:
d9:75:6f:fd:99:f6:f3:ed:af:de:24:34:20:e3:c3:69:37:08:
bf:1b:a6:2b:93:a5:87:36:88:64:02:5f:b6:ed:b0:95:27:27:
88:03:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:47 2025 by rpki-client