Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: fcOX/n5rrHtoyZwFyM0vBTBmiahDHtxCgzFmv02oyFM=
Subject key identifier: 42:DE:B8:45:D3:AA:00:1E:91:42:B6:A2:21:5F:EA:C4:C7:C3:F4:2D
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 019873E1E6A12E85F0C75EF885D9B054F175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:41 +0000
Manifest this update: Mon 04 Aug 2025 07:00:41 +0000
Manifest next update: Tue 05 Aug 2025 07:00:41 +0000
Files and hashes: 1: 37GvZ07Bs9ALM-UjthgHQEKF0y8.roa (hash: pSoIBelVOfgMsL7bvPvm9KNh08Z3vU+jb3PDyOFmyw4=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: 1MKgE3dyVV9V83620PBcyybMv2BK4DbKo/7d5BbalII=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e6:a1:2e:85:f0:c7:5e:f8:85:d9:b0:54:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Aug 4 07:00:41 2025 GMT
Not After : Aug 5 07:00:41 2025 GMT
Subject: CN=42deb845d3aa001e9142b6a2215feac4c7c3f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:b1:ae:e8:66:54:4d:d7:85:83:91:52:a3:
7d:ad:a0:f9:b8:fb:37:64:31:ac:a6:63:21:3b:bc:
a0:a7:d6:ec:3b:6f:53:25:5c:d3:60:e2:cc:09:f6:
6e:18:ce:83:61:8f:49:fd:a6:77:a6:f3:e9:72:b6:
80:89:e4:77:99:f6:cf:fb:fd:9e:f0:93:a5:b0:14:
97:0c:0c:0a:4e:e4:03:01:f1:4a:6f:29:76:e4:b8:
ed:f0:8a:bb:d6:c6:15:cf:c2:9d:d5:91:d8:c6:3b:
95:86:ee:6b:d8:60:3b:fc:a9:b4:ef:9c:d5:2e:80:
b2:a5:c6:53:61:93:ff:1d:44:49:e7:cc:79:59:7d:
34:1d:2a:36:02:67:a8:c7:aa:fa:61:35:8c:d4:35:
3e:ec:61:1b:8c:8d:b3:6c:dc:ef:d5:e8:94:9e:13:
2e:7b:44:69:7d:4a:48:f1:24:01:e3:fa:db:c1:cb:
9f:5d:9f:6b:5d:9e:d4:d3:83:10:13:83:6a:ec:65:
6e:d6:c4:d0:f5:0e:ad:c8:a5:52:a3:a1:e0:14:f0:
73:c2:3b:43:b0:8a:a8:18:c3:86:6c:a4:53:e8:4e:
cf:2f:e8:44:71:43:1f:79:cf:90:d4:55:74:86:bf:
ff:f1:a3:24:64:6a:d6:9c:8c:a9:5a:ef:07:2b:5b:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:B8:45:D3:AA:00:1E:91:42:B6:A2:21:5F:EA:C4:C7:C3:F4:2D
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:eb:d5:77:4d:64:0d:99:76:c5:31:5a:63:d4:23:64:66:
05:1e:49:19:88:63:65:40:d1:f0:49:24:7b:cb:ed:4c:fb:1f:
a6:e7:2d:f4:56:3e:79:51:a4:20:3c:bb:42:e3:31:5f:b0:4b:
a5:be:dc:a0:40:0a:8d:b4:36:b2:a8:a7:83:05:fc:76:dc:92:
3b:a1:35:d1:1b:7d:50:79:07:30:35:08:59:11:ce:cd:17:0f:
98:1c:59:b9:79:77:17:1d:5e:49:67:ae:59:fd:32:21:38:40:
df:d2:a3:a9:cc:15:77:0a:c2:fd:74:68:41:0d:a9:5f:0f:b9:
59:25:fa:d1:50:dd:2a:d9:08:84:24:7d:82:da:2e:ab:75:a9:
b8:d3:45:82:18:25:8d:de:d2:23:55:84:30:e9:8d:94:82:23:
03:30:d4:77:d3:68:f4:99:06:12:8e:1b:95:d6:82:f8:42:e2:
f4:ed:0b:2a:15:a2:bb:fc:9d:0e:d8:f7:08:e3:ac:e4:05:1f:
28:3e:32:2a:34:dc:96:2f:25:59:dc:66:a0:f6:1b:7d:ed:05:
39:17:66:95:ce:6f:3b:b9:d4:6a:ae:b2:dd:f4:a4:36:e2:16:
4e:8b:2f:66:a8:60:7b:5b:46:e1:1e:58:85:39:65:58:3a:60:
cf:fd:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:26 2025 by rpki-client