Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
File: oCUv6bQqZD9HflhGYZquiGkX7_s.mft (raw, json)
Hash identifier: QyzrhGjP7qIyzddGdMzVuBY65FYyu4qpoDTsb3QDZik=
Subject key identifier: 57:DE:1A:D5:5C:6F:1B:E9:46:31:93:FA:17:5B:30:19:26:82:24:A0
Authority key identifier: A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB
Certificate issuer: /CN=a0252fe9b42a643f477e5846619aae886917effb
Certificate serial: 019848530DC71DC37CAA7406D45C512903CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
Manifest number: 13E9
Signing time: Sat 26 Jul 2025 20:00:59 +0000
Manifest this update: Sat 26 Jul 2025 20:00:59 +0000
Manifest next update: Sun 27 Jul 2025 20:00:59 +0000
Files and hashes: 1: oCUv6bQqZD9HflhGYZquiGkX7_s.crl (hash: o3qvwapy1pgPBeNFo7eh9FxWtGJX5zjw4T3jUkqGw6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:0d:c7:1d:c3:7c:aa:74:06:d4:5c:51:29:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0252fe9b42a643f477e5846619aae886917effb
Validity
Not Before: Jul 26 20:00:59 2025 GMT
Not After : Jul 27 20:00:59 2025 GMT
Subject: CN=57de1ad55c6f1be9463193fa175b3019268224a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:93:b6:92:ca:fb:20:37:1b:f1:51:c1:d9:
c6:33:14:78:05:e9:8d:01:c0:a1:10:a1:c6:0b:78:
a6:17:88:30:d6:12:ed:96:89:a2:c0:33:7f:3e:ee:
5d:76:ff:72:6c:5c:ac:4b:79:e7:6e:dc:2a:da:6f:
02:75:47:97:38:15:48:1c:80:70:5d:62:29:d1:2e:
bd:85:9e:ea:2a:85:21:25:38:88:b7:ec:63:1c:3a:
c4:5e:f5:a8:72:bc:e7:2f:6d:36:a0:0e:25:96:5d:
e2:eb:ed:72:39:c5:40:1c:3b:42:b6:ed:9c:4f:c5:
25:4a:3f:94:dd:49:8e:ab:01:2b:97:36:1e:ee:75:
49:22:e5:ce:0c:b8:95:93:02:b5:c1:f4:bd:3b:50:
13:21:a9:02:0e:03:1f:aa:f3:98:ca:ea:46:37:83:
46:ef:a5:29:65:c0:66:bf:ff:d4:2c:7c:43:73:75:
ba:e1:8a:f6:88:76:28:f2:f5:85:d2:a0:d9:a2:d8:
a9:f6:17:30:ab:bd:42:94:12:4e:8d:ec:ce:47:9f:
c3:a2:a6:df:2f:91:f2:b0:06:00:0f:10:77:26:3d:
9f:c5:b2:61:5a:b6:ab:5e:fa:6f:82:56:b3:2e:43:
0d:48:a4:da:d1:a7:27:c7:70:38:2e:3c:66:92:48:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:1A:D5:5C:6F:1B:E9:46:31:93:FA:17:5B:30:19:26:82:24:A0
X509v3 Authority Key Identifier:
keyid:A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:ce:4f:80:33:8f:5d:1a:37:4a:e7:24:83:17:0f:ca:0a:
5e:05:65:f1:25:81:09:fb:59:c3:1b:4e:c2:34:c5:b0:a2:58:
bc:74:7b:d7:fd:3d:29:e8:04:b9:97:c7:f4:0d:2f:03:57:70:
05:43:ab:54:9e:cb:b4:86:d1:88:86:be:50:9f:49:3f:2d:31:
30:d4:e1:cc:4b:50:76:d7:df:8e:d2:05:8d:5d:d3:d2:e6:07:
d0:f4:89:c4:c4:11:2d:95:9a:91:97:b6:df:d0:65:4b:9b:75:
f0:97:39:ec:58:07:0f:68:b9:15:03:82:92:72:bc:69:1d:53:
09:5e:07:15:2e:56:d8:6a:6c:cb:2e:3e:9e:d2:8d:a4:48:c9:
05:5e:c6:94:fa:35:80:73:8d:c2:50:bf:b2:41:7f:50:34:8f:
b6:c9:6c:bb:ba:67:c7:4e:53:25:42:a3:71:70:88:d9:55:a7:
b7:3f:ef:c3:52:04:61:8e:14:18:d6:03:f6:a3:6f:c8:c5:88:
a1:1e:80:3a:7b:3f:61:26:d0:15:74:72:62:e4:86:fb:ef:db:
4b:65:1c:c4:7c:42:16:d5:91:0b:99:89:95:89:46:9b:21:cb:
9a:4f:67:4e:54:e8:3b:ad:f2:7f:13:e8:f1:08:4c:9e:67:09:
2d:14:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:49 2025 by rpki-client