Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: MrIl0RUsxlIBx/RvgFBCNLp9A8k0QAP/MF6Zkae/UF0=
Subject key identifier: F5:AF:F8:04:F8:4E:54:C9:3B:A3:B0:F5:D7:4D:96:E3:A6:FA:AB:A0
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 01987D8AA7043BEEF8EAA77616B356717F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 02CC
Signing time: Wed 06 Aug 2025 04:01:35 +0000
Manifest this update: Wed 06 Aug 2025 04:01:35 +0000
Manifest next update: Thu 07 Aug 2025 04:01:35 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: kSvQzKu69/AUA3UD5XO4PBloIfE0I9lLPlhG+1vnwrQ=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:a7:04:3b:ee:f8:ea:a7:76:16:b3:56:71:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Aug 6 04:01:35 2025 GMT
Not After : Aug 7 04:01:35 2025 GMT
Subject: CN=f5aff804f84e54c93ba3b0f5d74d96e3a6faaba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:e4:f1:21:14:b8:73:ed:f7:6b:43:17:84:
f8:51:51:5d:1a:5f:0c:a6:43:96:25:3d:ae:fb:4a:
42:8e:97:76:91:7e:18:8f:18:ff:bf:b3:31:f5:ef:
f2:65:ca:be:8a:d2:cd:29:7d:16:6b:a3:c5:76:97:
0f:47:cc:c3:7b:49:39:b6:40:81:9e:77:8a:44:51:
c5:87:48:4d:db:82:87:08:12:08:35:a1:52:e7:c7:
69:c9:69:66:85:14:42:64:55:8c:ee:19:98:77:77:
22:33:07:99:dd:78:78:b1:61:92:eb:9f:a3:58:b8:
8c:37:14:19:8f:85:e3:65:be:24:fd:5b:c8:d4:49:
89:74:8f:04:6f:07:84:f7:be:47:c7:68:90:2c:ee:
4c:e4:a4:81:da:4b:20:a4:96:73:fe:ed:c9:43:cf:
2f:34:dc:39:72:0f:2b:94:1b:2d:7b:48:fe:69:57:
01:14:a8:3f:a0:59:61:fb:72:41:e0:ae:91:98:de:
2f:35:19:23:e0:e6:e1:7d:33:90:ec:6a:6f:e0:51:
b9:84:e3:52:c9:2d:27:90:7c:fa:52:f5:28:85:5d:
b6:9d:f0:d4:27:0c:a6:a8:cf:90:75:eb:51:c0:8c:
56:48:30:35:25:9e:b1:ae:d4:ee:35:c6:7b:d7:a1:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:F8:04:F8:4E:54:C9:3B:A3:B0:F5:D7:4D:96:E3:A6:FA:AB:A0
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:2d:b3:75:42:4b:7d:6c:eb:cb:ba:95:f4:86:40:8d:f0:
bc:94:fd:4a:85:a2:60:ca:c5:59:9f:53:52:d8:0f:39:5a:b8:
1c:47:d9:24:70:c2:a9:82:0c:c0:9e:96:e9:12:d6:77:e0:0a:
d0:77:cf:b6:19:93:0e:67:95:5c:70:f1:cb:cb:19:5f:b4:56:
17:d3:58:8f:5d:5c:0e:e4:c7:59:6d:26:c5:66:7d:d1:09:1f:
86:22:48:2e:83:5f:50:83:84:42:9f:bc:f2:30:1f:e7:68:3d:
2c:75:e1:d7:9d:cf:28:96:cc:5e:19:18:2c:38:c8:a7:97:4d:
b0:ef:08:11:af:5e:07:95:56:33:ae:b9:4c:ef:c9:af:d5:51:
fe:80:d1:0c:4c:92:e4:2d:e3:54:a8:f6:ea:39:b9:b3:ee:40:
7f:02:c2:03:4b:92:d2:ac:84:28:d5:b5:e4:fe:e7:24:d9:0f:
4b:5c:52:13:4b:0c:91:1f:41:30:72:74:0e:b1:ac:e3:ce:f5:
2f:f6:06:9c:00:d6:18:cd:5f:41:0c:2d:c2:db:98:53:c7:81:
b9:ed:a3:e2:58:47:88:00:b1:07:ea:51:9d:94:fe:d0:1f:03:
25:c1:cb:73:8e:99:a0:6c:d4:c6:b9:86:b8:7c:15:e5:cc:cd:
1b:1e:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:59 2025 by rpki-client