Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: suR1ylhOPnnkbiY3Jqio/uFcKcGOGHln6HjXtEb05FE=
Subject key identifier: 95:05:6A:6C:8C:EE:E1:C0:4A:C3:DE:01:DB:A1:CD:3D:BE:5C:9A:0B
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 01987DF7BCBD118A8DAA356A185B83DF87F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0C9A
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: IeCxUD6t/dl1CYx9/MhMoNQLt2C8puLGvukL1b14K6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:bc:bd:11:8a:8d:aa:35:6a:18:5b:83:df:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=95056a6c8ceee1c04ac3de01dba1cd3dbe5c9a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:50:8d:3b:ef:74:07:18:26:42:30:aa:f5:
15:60:b9:37:55:62:98:8b:75:09:38:78:9b:ec:a2:
1e:0e:4d:34:9f:14:04:5b:37:fc:32:89:96:20:a9:
11:e4:3e:15:5f:67:c2:82:f2:cb:90:d0:23:ff:7b:
fb:39:e0:10:50:4a:8e:69:aa:a5:d6:f9:49:8b:7b:
76:25:23:b7:51:b3:1c:56:06:87:75:76:0b:3f:ce:
a9:7b:a7:ff:19:45:f1:31:85:ee:54:62:96:cb:0c:
b7:7f:f4:d9:8a:66:94:2b:38:75:c4:d0:24:05:5e:
6b:51:25:65:96:62:4d:6b:39:e1:ef:70:0e:71:4c:
65:f2:ff:fa:8c:35:ab:2f:9b:97:ce:fc:67:3e:04:
f4:f0:29:d5:08:dd:da:25:5f:fc:f9:d2:87:fe:51:
ec:0b:73:ae:24:9f:57:6f:7e:d9:ef:6a:91:de:fc:
41:50:76:65:8d:ef:18:32:f6:78:95:04:ae:03:67:
8d:e1:ef:93:42:ff:9f:f3:43:5d:cc:a3:bc:69:5e:
e9:f3:3c:22:92:4e:42:f4:9b:31:54:25:65:f2:df:
16:93:cb:2e:6e:02:35:44:f1:91:81:68:5d:3e:1c:
18:f8:5c:f1:22:2b:60:67:02:4a:22:88:c8:77:ce:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:6A:6C:8C:EE:E1:C0:4A:C3:DE:01:DB:A1:CD:3D:BE:5C:9A:0B
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:17:6d:27:62:95:2f:ec:4b:b8:46:54:69:42:9e:25:2e:6c:
7b:91:32:20:80:a1:56:c8:ad:f9:75:41:9e:4e:2f:20:2c:a6:
11:46:a6:01:cb:bc:0a:c2:fd:2d:da:34:d1:4a:a9:cb:a9:fd:
43:89:d2:ac:c6:aa:2b:ee:62:aa:0f:83:5b:be:81:ff:01:4b:
dd:be:65:b4:0c:a2:71:79:09:98:74:c8:fa:48:48:f0:b5:be:
e3:67:ba:bf:ef:f8:3c:2c:9e:54:0c:fb:6c:a0:e5:1a:cc:c2:
f4:aa:f8:5f:f9:28:97:73:4b:a0:70:5d:75:c3:f8:ac:81:2e:
46:3d:1b:e2:dc:b3:54:bf:f7:77:34:4d:bf:12:6b:35:6b:d9:
4b:6b:1d:dd:92:15:56:38:4b:de:65:54:e3:5c:bf:f1:ab:45:
c4:3a:d1:0a:f1:b3:a5:83:0a:58:73:36:23:10:ae:b7:e6:f0:
a6:6b:90:64:78:c6:a9:15:4a:7e:8d:5a:02:ce:2b:05:7c:07:
7f:d2:21:e5:c0:22:5d:ed:bb:7f:ae:84:8d:5c:37:fd:73:22:
a6:a0:0b:6f:ea:a1:27:a1:d9:99:c6:da:7a:13:4f:5f:04:9e:
38:bf:11:21:ad:f5:17:da:4f:f4:3d:de:06:7f:66:d1:0e:3a:
85:90:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:51 2025 by rpki-client