Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: vcl0437mzwIVAzlor2wAWnnJQ3Ag0oCZ+RBbdTosPko=
Subject key identifier: 0E:9A:53:2F:CE:2D:B2:02:EA:E8:42:9A:A9:75:A2:BC:51:42:1E:A7
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 0198462D2A7D324A6725918582AF87624235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 14D1
Signing time: Sat 26 Jul 2025 10:00:21 +0000
Manifest this update: Sat 26 Jul 2025 10:00:21 +0000
Manifest next update: Sun 27 Jul 2025 10:00:21 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: eimANsuHLmjF06QlyLrWQtQ7KUsbX+sk3LWrK2s7Rlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:2a:7d:32:4a:67:25:91:85:82:af:87:62:42:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Jul 26 10:00:21 2025 GMT
Not After : Jul 27 10:00:21 2025 GMT
Subject: CN=0e9a532fce2db202eae8429aa975a2bc51421ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:25:ac:80:0a:ce:03:93:1e:cf:47:61:90:
0d:9c:1d:0e:18:37:8a:9c:5c:91:04:5e:71:aa:b8:
fc:0f:d8:9a:df:64:5d:1f:3e:d7:48:37:f9:89:ce:
9a:68:38:f8:4b:01:68:b6:b2:20:12:cb:9d:9b:b9:
3a:7d:f0:c9:17:05:5a:f1:4b:0a:65:8c:69:bd:75:
65:fa:fb:b3:d9:8f:8f:8c:82:79:8e:61:24:24:89:
c9:13:0b:8e:36:4c:27:21:52:1f:9e:ca:20:a6:a3:
5f:69:85:18:8c:b9:b9:c9:7c:e2:f7:74:1d:7d:f8:
02:ac:a5:d5:2b:9f:48:07:31:f9:a4:92:a0:f3:f8:
77:47:1c:41:f4:b0:ce:59:e2:d2:06:c6:0d:5f:bb:
09:17:c3:85:81:d8:9f:d9:a7:a6:11:4c:40:61:3d:
ac:ee:1f:38:73:a2:f5:3d:21:da:af:20:12:9b:c4:
e9:41:21:7a:e8:68:f3:f5:33:66:cd:ec:4a:96:ed:
77:2e:3b:3f:31:a6:ec:fb:4b:dd:aa:fd:95:53:4e:
50:dd:f8:fe:bb:e8:44:65:02:00:73:40:f2:3b:ca:
99:92:2d:22:79:13:21:5b:6f:89:53:6e:bd:08:2f:
92:f3:34:85:0a:81:a0:bb:f2:6d:63:ef:39:9e:eb:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:53:2F:CE:2D:B2:02:EA:E8:42:9A:A9:75:A2:BC:51:42:1E:A7
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:19:80:74:c6:b2:3a:44:72:88:10:16:4f:5d:fb:30:dd:
40:4b:ee:f5:38:44:9c:7c:9a:ce:7e:ad:5a:ee:45:52:bf:9d:
b7:db:90:f0:4c:f2:91:45:23:d9:93:a6:14:99:58:d9:9e:e0:
e0:85:5b:e1:21:4e:5c:15:8d:d1:60:ab:49:cf:0b:b8:74:07:
81:4e:e1:08:a7:1d:64:53:d8:43:f6:7d:15:68:dd:01:fc:04:
96:9c:55:29:06:29:dd:05:26:2a:74:4a:42:b9:9c:a8:ba:4f:
ff:3d:f3:35:9f:9d:9f:e7:10:d0:e0:da:0a:98:74:0e:56:b0:
95:58:cc:ba:7d:43:c0:8a:8e:e9:d2:2c:da:ed:e8:03:39:c6:
71:9b:14:cd:99:8e:ef:93:ce:2c:68:97:e9:ad:94:55:c7:46:
a5:03:b8:86:63:96:df:89:19:ea:35:e2:65:ba:30:d1:4a:1b:
2d:07:7f:e5:97:33:1b:74:96:9d:49:c1:9d:40:fd:fa:fc:f9:
0b:b4:97:ea:78:3a:96:83:94:66:11:88:da:b0:bf:e4:44:6f:
e0:87:93:50:5f:5a:92:a2:80:f9:62:2b:dd:56:46:f3:35:c8:
ea:89:1f:d8:db:9b:95:fa:ef:a9:22:e2:f9:84:d0:e5:ae:e4:
de:f6:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:21 2025 by rpki-client