Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: oJZBl+PzFTqM2Wjhk2vg5nuojI5yYhRp4MtDQRwCE/w=
Subject key identifier: 05:28:3B:78:87:FE:62:89:1A:68:D3:C1:1A:B0:C5:FC:55:15:90:A4
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 019873E22F374F58FDE4D84EBF89371D3CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 131D
Signing time: Mon 04 Aug 2025 07:00:59 +0000
Manifest this update: Mon 04 Aug 2025 07:00:59 +0000
Manifest next update: Tue 05 Aug 2025 07:00:59 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: JqZtTq1cSENjmZpUjub0CSkfDbN14Ag2TI7Fsn6ksx4=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2f:37:4f:58:fd:e4:d8:4e:bf:89:37:1d:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Aug 4 07:00:59 2025 GMT
Not After : Aug 5 07:00:59 2025 GMT
Subject: CN=05283b7887fe62891a68d3c11ab0c5fc551590a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:1f:b3:20:61:59:69:96:7d:4a:e8:b0:87:
9f:34:53:07:3b:b0:58:1c:ec:a1:74:ca:e7:3b:8e:
6a:3d:ac:01:e5:09:e1:ac:11:48:14:d9:5a:7b:5b:
ff:16:34:30:cd:5b:2b:8a:b9:a5:50:ac:47:81:7a:
10:16:59:3e:0f:18:c0:1f:85:2f:d0:d5:bd:ac:1a:
22:d1:89:20:ff:04:4a:7a:21:36:37:e1:2d:1d:fd:
9e:65:a8:2e:f3:36:04:ab:60:e2:d6:41:43:4c:f5:
98:54:ff:43:a9:d6:43:14:51:86:bd:d6:d0:04:92:
4d:0f:76:15:62:6b:7f:6d:7a:f1:eb:75:33:e9:d8:
7b:b5:94:c8:cf:af:ac:ab:65:b2:07:cc:27:ec:a2:
4a:2e:36:9a:19:d4:b5:7b:69:9d:bc:d9:e0:bd:4d:
ba:c7:55:cb:64:6f:6e:d9:31:3b:34:c1:0f:d8:1b:
a9:40:f0:da:4a:6a:b5:30:75:cf:17:b5:a5:34:52:
08:80:66:da:81:60:0d:64:c8:4a:0f:a6:8c:d8:d6:
e1:8f:d5:cf:58:5e:bd:9b:f4:9c:3f:22:c6:04:e6:
11:21:ed:7e:70:0b:7b:09:87:08:3a:d8:1a:09:9c:
c9:36:56:46:02:02:c5:79:3d:a8:3c:ce:c3:77:8a:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:3B:78:87:FE:62:89:1A:68:D3:C1:1A:B0:C5:FC:55:15:90:A4
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b4:b9:38:72:32:cd:8a:ea:d8:f1:77:8b:a3:c2:77:d9:88:
d3:a2:f5:9c:fa:41:19:6e:06:ad:37:a8:7b:59:fd:f4:2a:c2:
bf:26:e1:2c:9b:5e:d5:16:41:7d:81:7c:5f:22:55:d7:cd:a3:
81:c7:ab:9a:24:bc:39:04:05:b5:ce:e3:79:63:f4:fb:eb:5b:
2e:20:5b:00:4f:1e:1f:1f:ec:35:ee:b6:98:d7:40:68:9f:48:
71:0b:4e:6c:a5:5d:f5:6a:a1:f7:58:b8:d5:4f:85:88:1f:d6:
b6:91:07:6a:0c:2e:32:f6:bb:6e:3b:b4:70:c7:88:07:c0:0d:
e1:8d:1a:91:24:59:b0:b3:9d:82:9a:d4:5c:e2:d3:e2:80:00:
2e:1a:0a:e4:3f:87:bc:cf:f4:70:2b:48:cc:ac:68:63:a4:38:
31:62:36:b6:50:31:6a:a7:24:84:db:95:96:2e:41:89:65:cd:
e4:42:f8:a6:58:58:bd:54:f0:37:a3:8d:34:1d:4f:06:f5:25:
03:f3:d8:bc:51:80:e8:c0:bd:5d:ac:40:62:83:0f:30:f0:e8:
ea:4b:1e:d0:a8:fd:d4:3b:48:56:58:88:ff:6f:a2:25:5b:3e:
10:4c:74:36:e3:05:67:71:21:64:00:62:02:23:70:0c:4d:fb:
f6:40:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:36 2025 by rpki-client