Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
File: ogqr6NvAhXg0PCW4xomHpevAOMk.mft (raw, json)
Hash identifier: 3L5U0Qn3cWxFEC2XseCVGvx5H11UoFpqq12bexk9K+s=
Subject key identifier: C0:4E:1C:36:5C:5D:AC:B0:5F:30:0C:2B:A1:F8:F1:B4:39:32:AE:9F
Authority key identifier: A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9
Certificate issuer: /CN=a20aabe8dbc08578343c25b8c68987a5ebc038c9
Certificate serial: 01982B23E0152843D8B90EC28240B5BD31E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
Manifest number: 41
Signing time: Mon 21 Jul 2025 04:00:27 +0000
Manifest this update: Mon 21 Jul 2025 04:00:27 +0000
Manifest next update: Tue 22 Jul 2025 04:00:27 +0000
Files and hashes: 1: ogqr6NvAhXg0PCW4xomHpevAOMk.crl (hash: 8UI4kBNC0xDI8mKQmWe1gW2I6SsOJJt9XAyCHVDxMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:23:e0:15:28:43:d8:b9:0e:c2:82:40:b5:bd:31:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20aabe8dbc08578343c25b8c68987a5ebc038c9
Validity
Not Before: Jul 21 04:00:27 2025 GMT
Not After : Jul 22 04:00:27 2025 GMT
Subject: CN=c04e1c365c5dacb05f300c2ba1f8f1b43932ae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:03:92:16:19:12:48:ea:95:83:82:96:17:
a5:7f:89:7b:05:1b:34:f9:67:9a:d5:26:b9:17:07:
30:ee:b8:a0:95:eb:67:3b:79:c7:42:9e:80:3a:1d:
0e:11:53:5a:68:4f:c1:b1:6e:98:31:14:00:4c:0f:
e3:e2:27:8f:47:ba:0b:5e:92:c3:6d:78:ff:06:d3:
e6:06:6f:ad:76:56:b8:1c:f9:ca:31:9c:2b:48:c2:
97:77:56:2c:db:db:83:15:35:27:95:21:8c:c3:19:
8f:8c:d3:e2:58:c6:bc:f0:ac:4b:94:15:25:22:8b:
5d:1b:08:36:ef:05:af:aa:24:da:e1:c2:a5:23:ad:
91:cb:06:82:6d:b1:06:e6:f2:81:e7:34:4a:8d:55:
b0:ce:e2:22:90:c0:e6:59:ca:0f:11:0c:14:9a:85:
da:c2:fd:c5:68:cc:e1:1f:5b:34:ce:b6:13:ad:a7:
81:f7:33:cf:e2:c1:23:46:12:e8:94:98:42:6d:b6:
e1:33:dd:35:20:2c:c5:ed:f4:c2:59:78:5c:31:25:
05:bb:57:07:30:ec:4a:bd:10:a1:53:82:cd:de:e5:
6c:77:3b:d2:03:11:40:6b:c4:3a:47:13:2e:d4:11:
95:65:98:ab:a4:a3:c2:e3:5d:7c:72:a2:0f:e5:06:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4E:1C:36:5C:5D:AC:B0:5F:30:0C:2B:A1:F8:F1:B4:39:32:AE:9F
X509v3 Authority Key Identifier:
keyid:A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:52:49:96:82:97:51:5f:82:68:e4:d6:2c:d1:20:46:6a:02:
04:ea:6f:eb:0a:fd:c0:d3:46:9c:b0:b1:16:41:ed:d5:b8:b9:
8f:e7:76:bb:01:48:1c:51:2e:10:df:0c:bf:be:64:67:5a:29:
93:16:3e:9e:db:cf:29:06:88:d6:8c:f0:af:cf:48:af:b2:4f:
38:a1:61:cb:ce:6d:ca:ea:c8:0d:07:d8:dd:76:3d:57:0e:93:
38:e2:37:0a:54:64:7f:57:5d:18:29:09:83:82:2a:6a:c8:8f:
e4:35:5d:b1:1d:6a:94:09:7e:6d:80:b4:99:a2:9c:9c:66:ba:
7b:a9:db:ed:20:48:67:4a:60:ca:cc:b3:96:68:e9:c1:96:6b:
9f:a3:d3:69:6e:59:bb:b2:ca:37:fe:89:b2:6f:a9:f2:6c:06:
98:b4:00:b1:ae:b7:d2:53:7c:cf:c1:f2:ce:cc:75:56:ba:aa:
28:ea:81:57:ac:16:ff:7a:61:bf:53:c1:2a:31:62:60:af:37:
ab:90:2c:4a:f1:86:c9:c1:2d:2c:5e:bc:db:a4:55:7f:1f:0e:
21:39:42:ad:d1:be:1e:2a:0f:48:fa:cf:54:33:05:d1:71:13:
2d:96:0e:ef:67:87:e9:65:37:a0:74:3a:3c:e5:d3:74:e9:4b:
a9:4f:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:04 2025 by rpki-client