Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: My5NNQ2wYi45gM0naCtuUpJMnsdXcIFPXkpUw8MiIP8=
Subject key identifier: E6:29:B1:95:3B:32:9E:02:2B:BA:1E:CF:7A:96:B2:0B:11:68:C7:C2
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 01987DC0F6EE4187A37D7B0205D9E88C081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 15AC
Signing time: Wed 06 Aug 2025 05:00:54 +0000
Manifest this update: Wed 06 Aug 2025 05:00:54 +0000
Manifest next update: Thu 07 Aug 2025 05:00:54 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: MXh+v9CtMyymFYl4C/7nLa/qa/kLP9tdM7midMemYbE=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:f6:ee:41:87:a3:7d:7b:02:05:d9:e8:8c:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Aug 6 05:00:54 2025 GMT
Not After : Aug 7 05:00:54 2025 GMT
Subject: CN=e629b1953b329e022bba1ecf7a96b20b1168c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:ad:75:48:97:62:be:ee:d3:36:fd:bd:d6:
80:14:38:eb:04:48:6e:37:d8:0f:93:70:84:2b:33:
3b:6b:e8:44:b2:99:82:01:86:55:63:e1:b3:67:a1:
45:55:53:1e:3c:b7:03:a3:92:01:c4:b0:40:90:25:
8b:03:c7:87:b0:64:84:e2:f9:a3:d1:2d:14:fb:60:
18:f5:d4:68:96:91:fc:1c:df:ba:da:c1:03:28:3c:
c0:44:90:f4:eb:b4:9c:56:49:22:d7:10:cd:03:8d:
e7:a1:88:27:71:9c:82:2e:f8:30:39:c9:89:d5:80:
33:d8:93:61:4c:f8:5b:53:d1:5b:e7:86:76:3f:9b:
a7:d0:29:5b:3e:77:63:ad:2e:67:f2:0a:fe:63:41:
76:cc:5b:9e:14:11:53:ec:47:d7:9d:03:82:d4:17:
4a:b9:ea:0f:cc:77:b2:e2:3f:a9:33:b4:fa:91:07:
0e:67:74:7c:b6:4e:9d:af:b9:a9:76:4a:bd:f9:90:
10:0f:45:2f:50:16:9b:62:34:4d:b4:ea:11:bc:7b:
4c:e0:e2:9a:f0:93:b1:c9:57:7a:62:7c:9d:8c:d4:
c2:af:53:b7:9d:84:3a:98:d9:d1:18:06:ad:0f:21:
be:21:66:7c:9d:ab:91:c7:bc:56:22:b3:62:55:9b:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:B1:95:3B:32:9E:02:2B:BA:1E:CF:7A:96:B2:0B:11:68:C7:C2
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6d:b7:1a:a0:eb:77:a0:61:1a:b3:6e:88:66:97:bf:0a:f1:
ee:1b:be:6d:cb:6e:3e:e6:3c:01:1c:15:5b:02:3d:db:73:96:
1f:12:67:c7:08:9e:5b:89:bf:d1:8b:59:08:b7:bf:a4:02:4e:
f3:19:ca:34:ed:3e:da:8d:ee:74:7f:e8:ff:73:1b:2c:e0:7f:
b0:4e:84:42:c8:15:38:f3:1d:91:5d:3f:54:cf:a9:31:54:b9:
85:54:9b:50:89:22:55:72:5a:5e:1b:85:0c:4f:6a:f0:f1:17:
3a:fd:84:74:0b:6a:6e:0e:b3:db:54:81:e5:65:3e:1f:18:61:
9f:da:f2:62:43:04:c0:24:a0:fe:f4:da:33:89:62:5c:fa:f8:
b3:5d:0c:bc:07:30:05:b1:df:48:f3:cc:ec:f3:c2:19:b4:58:
ac:c6:f8:d6:e3:bd:2d:9f:48:62:95:91:6b:99:ca:b8:65:00:
4e:f1:e3:0c:0f:1a:90:d3:73:4d:bf:8d:a8:9a:45:b9:e0:9f:
66:e9:e5:bb:24:83:f8:19:72:b7:2e:b9:07:92:85:0d:d3:71:
c1:45:c9:8d:69:82:98:ea:89:f6:bd:22:bc:c2:bb:13:da:c5:
df:dc:ff:07:bb:2d:ea:eb:29:e4:a0:af:8f:93:86:0b:46:44:
c3:ba:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:41 2025 by rpki-client