Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
File: oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft (raw, json)
Hash identifier: x7Xr7d5UGlKNpvk4Ys9E4UzUHuVA4m/ewxRHYVqtCRQ=
Subject key identifier: C9:E5:31:88:BA:93:B9:A1:54:D1:1D:7F:AD:56:83:98:80:ED:25:E5
Authority key identifier: A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E
Certificate issuer: /CN=a323e041dd45965333e2b1474fc50be2f0fa950e
Certificate serial: 019848C0B5835C1ED4C93C9AC18FC4083D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
Manifest number: 0A11
Signing time: Sat 26 Jul 2025 22:00:45 +0000
Manifest this update: Sat 26 Jul 2025 22:00:45 +0000
Manifest next update: Sun 27 Jul 2025 22:00:45 +0000
Files and hashes: 1: oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl (hash: ZjJ+A3wsFXYXLkobBkcmVOQNidPLQkSkPp3yAc8X1Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b5:83:5c:1e:d4:c9:3c:9a:c1:8f:c4:08:3d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a323e041dd45965333e2b1474fc50be2f0fa950e
Validity
Not Before: Jul 26 22:00:45 2025 GMT
Not After : Jul 27 22:00:45 2025 GMT
Subject: CN=c9e53188ba93b9a154d11d7fad56839880ed25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:ea:8b:7b:86:81:84:02:b4:ee:20:2b:08:
83:60:d6:51:05:83:f8:4a:f2:2c:b5:ef:14:cc:6e:
e3:13:98:b0:36:78:dc:fa:5f:5a:cc:5b:9c:25:d8:
2a:46:8c:2c:8c:49:db:1e:12:76:57:7d:02:12:f0:
8b:15:fc:16:b4:52:c3:fc:be:1a:75:ab:b2:cb:a2:
5f:fd:82:87:51:1f:ed:4e:34:77:f1:0c:71:d1:62:
7e:44:4d:3a:c0:da:1e:f2:f2:f6:35:28:ae:ce:f8:
a7:ca:b2:f7:da:34:63:b1:f3:80:0e:d7:84:b6:0c:
d8:04:91:7c:fd:92:8f:9c:1e:56:4b:06:14:3f:f2:
bc:f9:a3:d0:d3:79:66:b7:61:d8:d1:bd:57:c6:b6:
a0:3d:52:dd:e6:97:58:06:6c:c3:cf:cc:c9:1a:15:
5c:3c:d0:16:b2:5f:40:77:4c:a7:e0:23:fa:29:2e:
46:4b:41:e0:79:09:56:65:a5:bd:8f:24:de:0d:e2:
46:35:48:3e:fd:b5:d9:be:fa:5d:1c:9e:5d:bd:49:
bf:53:fb:9e:8b:bb:3a:78:c4:e0:83:b0:22:92:4f:
af:73:f6:08:fb:22:4a:df:38:fc:0a:1b:74:33:77:
bf:03:4e:57:3b:a4:21:58:e5:6b:85:18:ec:1a:23:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:31:88:BA:93:B9:A1:54:D1:1D:7F:AD:56:83:98:80:ED:25:E5
X509v3 Authority Key Identifier:
keyid:A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:a7:a3:1d:e2:94:8e:21:87:d5:e9:16:03:54:c7:a0:4e:
43:46:e9:79:96:22:87:e5:1b:17:4c:3a:66:7b:eb:b1:58:3b:
ff:e6:46:21:14:51:0e:3f:54:58:8d:8e:66:8c:25:79:da:9b:
2d:d0:ad:cb:55:fe:8f:56:c7:27:16:b0:40:98:2e:1e:36:38:
55:3d:d5:12:d1:65:eb:64:bc:b4:96:1e:b7:cd:b9:d0:0f:e6:
40:8e:7f:bc:41:b0:55:dd:35:15:9e:5a:ee:cd:e6:6d:44:c8:
a7:8c:5e:23:75:23:6e:87:80:01:f1:ca:63:44:eb:43:e8:05:
03:52:85:25:20:39:bd:65:c6:34:15:d3:fa:ef:0a:9d:5c:d1:
ec:72:e5:df:0b:14:2f:96:54:68:f9:20:40:3f:d8:5b:45:63:
12:65:12:de:b9:45:6f:8b:28:ee:da:29:16:55:33:bf:22:01:
a2:c2:f5:1b:d3:bb:77:37:6a:0c:4c:fd:c0:66:b6:0e:09:ea:
f0:9e:9a:9e:89:4e:da:3b:78:a9:32:77:ca:0e:6a:b8:3c:c8:
0a:04:69:52:c6:40:a0:5d:8a:43:8b:67:90:82:8f:ff:a9:25:
7a:ab:ea:27:58:0c:c8:c8:5c:8b:62:5a:80:4f:8c:71:f6:e0:
1a:0b:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:02 2025 by rpki-client