Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: W9TVy99ktjBw3eXbjXYS+eMjpsRA5fcwCYmdX4ZtXVk=
Subject key identifier: E2:83:A8:3A:52:1A:B8:B6:E0:3B:A4:FE:DF:C6:0A:1A:8D:B2:5C:F6
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 0198481BA246DA00D0B9EBC18CB71E114A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0B24
Signing time: Sat 26 Jul 2025 19:00:27 +0000
Manifest this update: Sat 26 Jul 2025 19:00:27 +0000
Manifest next update: Sun 27 Jul 2025 19:00:27 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: kNC5Xw5lMX9yM9WZo2du9L6DCbVhspP3VacNylkNehc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:a2:46:da:00:d0:b9:eb:c1:8c:b7:1e:11:4a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Jul 26 19:00:27 2025 GMT
Not After : Jul 27 19:00:27 2025 GMT
Subject: CN=e283a83a521ab8b6e03ba4fedfc60a1a8db25cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:ff:25:f5:ac:1f:4a:96:c5:87:b4:e9:e3:
92:1a:b9:99:68:95:81:80:84:24:c9:42:ac:20:37:
37:f6:d4:34:45:94:2a:ab:c6:aa:fd:90:16:85:d0:
ce:ea:9f:4b:fc:e0:68:28:19:8a:5d:08:e3:56:98:
f3:37:aa:73:35:cb:3f:5d:53:3a:30:f3:83:dc:1f:
7a:56:6d:56:27:8d:fe:b6:61:94:33:9e:2d:6f:6b:
6e:f0:e5:41:71:bf:6f:34:44:17:41:c5:95:d4:dd:
58:8b:cc:fe:63:be:74:a2:2c:4c:54:6f:bb:7d:0d:
49:4c:41:1d:90:fa:46:d4:67:1f:1f:6d:b4:c0:52:
b5:69:d2:7f:76:19:1c:eb:0b:18:54:cf:b6:c2:d7:
be:91:05:89:db:7c:69:1e:b2:9b:55:42:ef:f6:00:
f7:f7:97:85:1b:37:30:d6:84:82:8b:34:3f:b9:82:
c4:59:dc:46:8f:35:c3:c8:6e:1f:58:4d:81:52:f6:
92:22:57:ff:00:28:68:6a:43:80:4c:46:5b:bf:b5:
a2:75:99:00:5c:53:9b:29:1e:3c:b0:9e:5e:d1:e2:
a9:85:0f:20:0f:33:9c:f7:20:55:7a:6d:79:47:73:
b7:a4:26:1c:5b:ff:6e:03:b2:ed:bb:43:72:98:48:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:A8:3A:52:1A:B8:B6:E0:3B:A4:FE:DF:C6:0A:1A:8D:B2:5C:F6
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:9a:8c:8f:cd:64:c3:60:ae:2a:ab:bb:5a:c4:6c:0f:c4:
09:ff:d9:6d:5e:64:53:07:59:1e:fb:d2:91:49:87:d2:36:f7:
12:83:84:d9:09:7f:b1:9e:c0:af:db:f6:59:ba:3d:29:4e:0a:
62:b4:fd:62:4e:f4:bf:24:16:50:b8:96:6d:5a:1c:ac:ff:b0:
ae:cb:6b:98:94:93:70:23:01:b2:73:79:a3:21:b8:e0:14:2e:
75:b8:79:8c:3d:03:d5:0a:63:cb:6d:f2:36:f7:d4:03:ad:46:
9f:e2:ca:b8:79:50:70:81:23:f4:a9:05:ec:8c:4f:48:57:58:
41:58:cc:0c:77:b0:52:84:88:c4:99:e6:3c:73:f9:02:9d:25:
a4:8a:25:62:1f:e4:b3:03:7e:04:ae:3f:e9:c1:0d:8e:7c:66:
3e:a6:04:46:93:88:9f:e7:0f:66:5e:dd:69:a0:fa:48:6b:c0:
c7:cc:32:86:3b:72:e3:f7:3f:ae:f6:95:30:88:3a:5b:d0:bf:
0a:b5:83:11:71:72:6d:40:3b:3d:6e:cd:ab:50:19:0a:4d:cf:
ae:5d:33:2b:29:e4:55:73:e2:ed:c1:c5:3e:b4:f3:ef:c8:f5:
29:36:8e:b6:af:b2:03:c4:48:2c:9d:1b:85:42:32:2f:24:24:
c5:58:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:02:19 2025 by rpki-client