Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: YGJgrajapF4v7aSgUQLa21Tpk9gmekBs6v6RF0ZEzyM=
Subject key identifier: 9E:6C:08:D9:BF:A2:64:A5:EC:B1:89:F4:07:87:15:2F:A2:C6:E2:D6
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 01987418B1AC700BF2334D6546E2FEB217FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 1031
Signing time: Mon 04 Aug 2025 08:00:31 +0000
Manifest this update: Mon 04 Aug 2025 08:00:31 +0000
Manifest next update: Tue 05 Aug 2025 08:00:31 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: exu1OwfHYruzP5bHQ0FIahCAx2JDHxjKFmcZz+20FeI=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b1:ac:70:0b:f2:33:4d:65:46:e2:fe:b2:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Aug 4 08:00:31 2025 GMT
Not After : Aug 5 08:00:31 2025 GMT
Subject: CN=9e6c08d9bfa264a5ecb189f40787152fa2c6e2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:63:47:49:f6:41:32:a0:0d:66:b6:af:2f:
a8:2a:65:bc:e1:76:e6:a6:6d:2b:36:a2:09:5f:04:
1c:71:01:72:41:bc:8f:74:da:58:72:7e:e9:e3:36:
16:3a:c6:bc:7a:78:54:8f:da:84:24:d7:69:38:c1:
22:ee:db:e8:a8:09:db:d6:ea:81:bd:b1:08:c2:f8:
88:e6:9a:37:62:37:84:fc:ee:d5:95:02:d3:a7:92:
ed:a9:b1:30:74:38:6d:bf:40:57:6f:e1:5f:82:52:
d7:62:e9:9d:c6:8d:30:45:46:8c:80:bf:33:d5:4c:
d3:ce:55:a5:52:f4:52:9e:fa:5f:fd:7c:18:55:1c:
bb:db:c0:e3:c7:12:d9:72:d2:a2:17:74:25:2c:11:
fe:05:25:e5:78:2e:9a:16:18:e1:3e:c4:c8:56:9e:
e5:6d:fe:17:65:16:dc:b3:ff:ee:39:de:b0:45:15:
1e:4f:1f:d5:4f:0a:78:cb:c6:88:31:d9:11:76:28:
e8:e7:f9:e3:65:86:cd:5a:89:ef:44:5e:3c:60:ce:
d9:63:38:ac:99:39:ac:15:e7:51:af:77:d5:8a:99:
98:a5:2d:56:d3:92:dd:82:33:a1:a7:7d:c3:b0:35:
2d:74:7a:6f:14:f0:66:0d:4f:91:4c:c7:11:d5:70:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:08:D9:BF:A2:64:A5:EC:B1:89:F4:07:87:15:2F:A2:C6:E2:D6
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:04:7b:10:fa:54:2e:17:85:71:24:ab:7d:15:6a:a2:73:07:
94:8d:87:11:de:29:85:4b:f3:68:cb:e8:05:f4:41:e8:ae:f6:
7b:d6:72:a4:a3:3d:1c:5b:2a:d8:ca:e6:92:5a:77:60:e1:6e:
47:16:b7:89:b8:6e:ee:69:aa:e1:d7:1e:ec:8c:52:8f:80:75:
a4:b2:56:7d:bf:fb:d1:15:4c:fa:75:15:1e:7e:6c:de:80:4c:
0a:04:95:6e:ea:fc:1a:86:ac:e7:77:1d:d3:55:a1:c4:a6:0d:
d9:03:29:43:44:7e:6d:3e:15:5a:37:62:f2:f2:dc:14:1e:db:
b3:0a:93:27:ec:cb:3c:a6:ce:fb:85:90:0d:7c:67:bc:f4:f8:
ad:22:9b:f6:89:c7:07:89:da:8d:e7:2b:41:9f:31:70:bf:ce:
e6:43:62:03:af:31:74:c5:25:92:64:d9:1f:02:a1:f0:b6:f4:
c3:62:2b:a0:5c:39:3e:91:e8:b9:e1:4f:c1:cd:d2:b2:22:25:
21:a3:1e:94:1e:b2:01:59:03:e4:18:8b:c4:86:8c:cd:7c:29:
84:4f:6c:aa:66:13:63:7e:68:d1:8f:18:11:56:95:da:39:4c:
c4:d1:a8:2f:a3:20:8b:e6:bb:1a:05:53:ee:46:95:d1:90:4f:
0a:26:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:58 2025 by rpki-client