Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File: OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier: tJcOkXkdSswjAambfgW/mzJjaGYcipu3m5OdAwqE9Wg=
Subject key identifier: C9:84:CB:7C:4D:CE:FD:1C:19:AE:26:3F:0A:01:2A:20:3F:24:5A:C5
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer: /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial: 0198477732180F507F64D7C4DF1ED5ABB89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number: 0553
Signing time: Sat 26 Jul 2025 16:00:50 +0000
Manifest this update: Sat 26 Jul 2025 16:00:50 +0000
Manifest next update: Sun 27 Jul 2025 16:00:50 +0000
Files and hashes: 1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: k3bXW9RnaRvWU8tVF5WXxM4nMIj6g3pnaw+rc8fIWwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:32:18:0f:50:7f:64:d7:c4:df:1e:d5:ab:b8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Validity
Not Before: Jul 26 16:00:50 2025 GMT
Not After : Jul 27 16:00:50 2025 GMT
Subject: CN=c984cb7c4dcefd1c19ae263f0a012a203f245ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:97:17:6f:77:ce:42:89:3d:bf:00:2e:27:
e3:c5:fc:6a:5a:5a:ad:65:1f:29:03:cd:aa:76:65:
6d:81:fe:bd:1d:fb:dd:be:48:0b:a0:55:65:a8:c7:
d6:cc:24:8d:90:66:75:ea:06:9b:90:ea:e6:1e:0e:
05:76:63:8a:60:6c:0f:d5:bd:95:90:a1:09:dc:97:
35:fe:5a:1e:d3:5c:84:9c:36:74:c8:d5:82:6e:2a:
8d:d5:98:8e:25:5e:8a:43:65:19:85:21:65:c7:5e:
cc:1c:47:b0:3d:52:f9:2f:f8:45:8c:54:a7:4f:40:
f1:30:0e:60:0b:b0:23:ad:ed:ab:1c:93:3f:6b:e5:
48:2e:df:bc:d9:53:7a:95:f3:c4:40:eb:ec:97:85:
3f:d2:88:6c:83:b5:ea:49:92:29:44:23:56:5b:2f:
0c:79:73:9f:79:ab:ec:41:aa:c6:9e:8a:90:69:16:
44:cb:01:2e:74:85:24:85:00:d4:a4:e9:a6:7b:1b:
2c:5d:a3:45:11:ec:39:d3:67:1c:41:ba:46:c3:0a:
e2:d9:fe:18:c1:05:b3:cb:9f:3c:f1:54:4f:fc:53:
47:b3:81:6b:10:28:6a:a0:ff:7d:eb:8e:a2:4e:51:
b0:f6:f5:ce:71:82:fa:b7:8a:aa:29:c7:88:b4:37:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:CB:7C:4D:CE:FD:1C:19:AE:26:3F:0A:01:2A:20:3F:24:5A:C5
X509v3 Authority Key Identifier:
keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:ae:82:2a:69:2c:99:c1:da:53:31:39:ce:b6:83:9b:81:
ab:cb:c6:24:46:8e:46:aa:bf:ff:3f:3a:90:68:fd:a3:d1:ca:
33:7c:80:d0:b8:96:2a:ba:7f:a3:a4:9c:28:d9:af:ba:8a:64:
6c:c2:f0:5b:53:64:83:cf:1e:85:d0:22:a4:f8:1b:b7:3c:4c:
36:b5:36:a9:0f:d8:86:9f:06:9d:ee:16:37:93:a1:e6:af:7f:
2c:95:90:96:87:b7:56:16:0d:da:85:66:62:1e:bd:bd:ec:c1:
06:a1:be:91:88:46:19:11:24:de:80:3f:5c:42:b6:ba:63:1b:
ce:c6:79:53:a6:c6:9c:b8:b0:0d:e4:0e:be:7c:b5:12:99:76:
1d:e0:5e:e6:ea:95:eb:fb:83:3a:a8:23:d5:e7:23:8a:8e:30:
ee:c0:68:60:69:03:6f:6e:30:6c:f9:cd:39:8d:77:25:7f:27:
76:d4:ba:34:52:9a:01:f5:09:78:3f:9e:67:04:4e:aa:1e:0e:
d7:dd:a2:eb:f0:a2:df:78:6c:ce:69:0b:7b:39:80:db:bf:e8:
13:f3:5f:d0:38:68:d3:6d:c5:a2:18:62:da:ec:d9:36:b0:0b:
ba:68:0e:ac:25:a9:08:4d:2a:ad:b3:6b:18:52:8c:15:2d:58:
b8:f3:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:16 2025 by rpki-client