Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: 9tYsXuv8e13mS5O1hou/GvUyXn8VPBX/0zWjU5ibtGQ=
Subject key identifier: 00:C2:4E:66:6F:02:22:83:F0:B5:62:1A:F5:23:BB:DB:B0:1C:46:B6
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0198496671DDB403B27A38B705731A88D695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0F00
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: et7tiINdKZU4oMZ4Iz3doSgAK2e73BY6yoAV8bCA/m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:71:dd:b4:03:b2:7a:38:b7:05:73:1a:88:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=00c24e666f022283f0b5621af523bbdbb01c46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:d4:07:5e:c8:5b:39:1e:22:a2:b2:cc:23:
54:c9:a2:f0:fe:91:23:19:12:ba:13:e4:07:4b:34:
29:52:0c:41:17:40:d6:98:2b:1d:a8:a2:e3:cc:22:
5f:4a:5e:5f:93:4b:a4:24:f4:24:3f:fb:26:48:23:
88:e8:b3:f1:11:df:fb:b2:56:d2:cb:c3:fd:f0:4e:
97:a2:60:c6:45:76:39:6d:46:8e:c4:1a:18:df:12:
71:12:41:40:f3:b0:f7:08:43:4c:a9:8f:46:1d:fd:
45:53:48:1b:07:7e:6a:8b:4a:12:58:b0:7a:d7:8b:
6e:fd:f8:3b:00:6e:ab:2f:a2:b0:99:a0:49:ad:70:
59:4d:56:65:d3:c0:2a:4e:6c:03:9a:b5:1c:91:9e:
97:a2:12:8d:ed:31:97:90:06:dc:21:c0:08:81:39:
ce:9c:41:8e:b4:74:f6:c8:4b:ad:37:d4:92:70:9a:
9e:0e:d9:9b:6e:fc:57:4e:e1:e4:e8:44:08:eb:c6:
8e:35:2d:d1:6d:98:e8:0c:97:40:08:41:ac:b4:92:
90:49:22:dd:c5:11:f6:86:e2:fa:24:3d:14:8c:e8:
62:d9:55:e9:a9:86:2f:56:34:23:95:93:52:f9:36:
bb:38:c4:7c:f3:4f:b7:5b:09:4a:5f:a5:28:33:0f:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:4E:66:6F:02:22:83:F0:B5:62:1A:F5:23:BB:DB:B0:1C:46:B6
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:52:0f:96:f2:e7:e3:83:5a:69:b4:61:94:a8:93:af:97:3e:
ef:a6:ec:b3:9e:fe:7a:c7:23:07:85:63:7a:09:e2:53:18:0b:
e9:d3:da:5b:22:b4:e5:07:91:8e:b5:56:89:1f:f9:44:df:22:
65:a1:58:ad:0c:43:63:60:f3:19:8a:f8:8a:29:b8:0b:27:c1:
e3:7c:0f:93:a7:34:f4:ba:8c:5a:bc:0a:63:8f:fc:0e:67:42:
8c:7c:20:94:59:c6:e3:a6:9f:40:45:99:f0:cd:b1:2b:7f:29:
0e:0f:81:c3:4e:4b:97:a1:e4:18:3d:d7:42:48:bf:9c:60:63:
49:cc:96:62:ae:2c:e1:5f:a3:9b:96:d4:57:84:98:c0:c7:d4:
a9:42:a0:27:d4:ef:49:9a:26:79:52:96:9e:24:d8:45:cf:af:
fd:00:9b:2d:3f:e8:56:83:33:f4:40:12:11:1d:01:b5:44:f6:
51:d1:3f:ae:4d:b9:04:17:ce:91:52:d1:6f:4b:97:91:c2:f2:
31:d7:4a:b8:c2:15:32:a4:a1:89:08:01:7b:32:44:a9:fa:3d:
45:e1:94:76:98:2f:b8:b2:5c:85:bf:ad:67:14:7a:01:66:f3:
67:a2:b8:30:8d:67:41:e9:bf:35:5a:73:0d:32:3b:d9:18:32:
dc:9f:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:15:36 2025 by rpki-client