Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: E2FbYf/hARhbhlMW3rV8NW+gNegGzP9hgsgB200Jkps=
Subject key identifier: 5F:84:D8:04:6E:E8:55:3D:F5:46:5C:E6:2B:33:0F:E5:79:66:7F:F0
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 0198737474CEC5636DB9FFA12BC4C65CB0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:01:08 +0000
Manifest this update: Mon 04 Aug 2025 05:01:08 +0000
Manifest next update: Tue 05 Aug 2025 05:01:08 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: c8RUO+MsaD4kUYINuJWtO2/4mvzhFhE5NuW6Zoq2IMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:74:ce:c5:63:6d:b9:ff:a1:2b:c4:c6:5c:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Aug 4 05:01:08 2025 GMT
Not After : Aug 5 05:01:08 2025 GMT
Subject: CN=5f84d8046ee8553df5465ce62b330fe579667ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:44:a1:9b:b4:0d:4f:d2:44:2b:97:10:99:
97:d1:51:04:46:86:ba:a8:e4:e3:33:e6:ce:8f:61:
c8:fd:7d:1c:9a:5b:c3:f2:49:ce:0c:a2:1f:b3:b3:
e5:1c:00:60:b1:b9:94:2a:2e:eb:6c:4e:88:a1:95:
8d:33:40:4b:d2:a1:7c:af:2c:5e:21:02:67:76:e5:
e1:1c:af:8f:58:f0:c6:44:71:91:97:d0:fc:86:11:
6d:d7:1c:3f:9a:7c:0a:35:82:13:47:30:b4:fc:b7:
1a:5a:ac:9c:67:e6:d8:f7:07:f8:11:3e:f1:94:3c:
2a:7c:cd:50:a3:f5:e5:a5:33:25:04:d1:a3:e8:3f:
66:41:da:10:fd:d7:4b:2e:8d:db:48:32:4c:2a:bc:
9d:50:9e:a3:91:2e:ea:36:42:38:4e:df:e9:38:e8:
66:6f:e6:19:a7:4e:01:82:98:70:f9:9c:b5:90:85:
a4:57:10:9d:f6:a1:06:2f:f1:87:8a:c1:fb:10:2b:
59:d1:ee:81:14:1e:c6:2f:9c:54:8f:73:97:97:b0:
7d:42:95:c6:4a:8a:fd:a7:a8:7f:7c:52:5e:a4:c5:
61:3f:78:43:ce:10:62:ae:ae:ed:c6:a1:d9:fc:63:
5d:6b:15:c6:22:bb:e2:47:af:8c:dc:0e:d6:27:fb:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:D8:04:6E:E8:55:3D:F5:46:5C:E6:2B:33:0F:E5:79:66:7F:F0
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:85:8f:28:50:e3:0b:67:68:57:9f:6a:fd:25:d2:82:46:
49:52:cc:35:04:74:cb:62:33:2f:e0:8d:92:02:c7:1b:a9:94:
c6:fc:21:ef:66:a3:28:4e:ad:59:5e:6a:77:98:37:e8:f7:66:
c3:bc:42:60:fa:45:66:d5:9d:10:fb:54:dc:a1:2f:da:84:05:
44:ef:5c:3a:20:f5:80:c0:88:87:6e:62:88:ad:f1:5e:48:4c:
27:10:c7:6c:a7:61:9e:84:7b:c5:1f:af:45:19:7b:29:9b:3b:
37:13:63:d0:b0:eb:a1:cc:b5:a6:90:f3:b8:1f:9f:95:ab:54:
8e:11:d1:87:6d:fc:ae:2c:21:3f:7c:9b:63:22:d1:15:90:b4:
1c:13:4f:84:03:29:bf:38:94:6a:78:79:20:cf:62:4c:73:61:
36:01:f1:a1:1d:78:61:87:a6:28:74:8c:57:26:55:85:e0:ce:
47:ef:71:29:b4:93:e4:50:34:2b:5e:8c:87:12:54:7c:50:ba:
70:1e:0d:c6:fa:2a:cd:3f:72:7f:80:76:b4:a6:a6:2d:17:34:
98:66:d4:2a:56:56:31:79:cd:a1:63:1d:68:ae:0a:de:fa:8c:
d7:19:9c:8c:e1:e9:69:be:ec:46:15:3a:08:8c:fe:ac:ff:22:
f4:70:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:07 2025 by rpki-client