Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: uBVUAKnHbFoExla4zRqXwqtyAw1O4BHqIhqS8hajSjQ=
Subject key identifier: 8E:68:16:A6:28:9A:29:14:66:15:22:0E:DD:EE:F2:D1:03:D6:32:60
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019844E3719B9A5E1B6ADFB264A5A056F027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0D4A
Signing time: Sat 26 Jul 2025 04:00:13 +0000
Manifest this update: Sat 26 Jul 2025 04:00:13 +0000
Manifest next update: Sun 27 Jul 2025 04:00:13 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: qTPkhQUv7WWuJMpwM72lmjslSlxrYLpQ4CEdU8VdjEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:71:9b:9a:5e:1b:6a:df:b2:64:a5:a0:56:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jul 26 04:00:13 2025 GMT
Not After : Jul 27 04:00:13 2025 GMT
Subject: CN=8e6816a6289a29146615220eddeef2d103d63260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:1e:e6:02:43:93:8f:01:48:75:2a:e1:67:
1c:93:1a:db:8c:3c:e8:6f:34:26:26:7c:c1:3d:09:
f9:a1:1c:37:7a:55:dc:18:b1:ff:23:31:4d:c6:66:
32:9a:9f:18:84:b2:07:e6:46:49:1a:78:bb:84:4e:
59:2e:0e:e0:3d:8e:5d:f3:d0:eb:be:d4:0a:3c:e4:
50:98:7a:1f:a5:f7:3f:85:74:c8:4b:53:26:4a:9a:
e7:01:86:6a:24:f0:db:af:3a:1d:ec:b2:4f:7b:d1:
fd:23:42:e7:05:03:ac:a2:54:18:29:b1:3c:69:ca:
b6:e8:cc:7c:fa:3e:4a:d6:ce:ba:fc:58:53:67:9c:
6d:28:0b:84:15:a4:9e:24:ad:37:d7:d5:75:84:dd:
c0:46:35:e9:a5:a5:af:0c:60:ae:86:24:a5:ac:66:
5e:db:3b:88:8f:17:57:98:71:42:33:e2:d5:cb:57:
8e:09:5f:d7:10:f3:88:1a:03:c6:51:45:da:18:2b:
2b:7f:be:65:6b:4e:b8:6e:9c:de:63:94:9d:8a:f7:
f2:08:cf:08:7a:dc:9c:5d:b0:8f:8d:bd:14:39:b5:
95:75:b4:8a:99:b3:72:b1:76:a8:d7:1d:be:5b:69:
aa:f3:19:69:42:85:30:c4:58:24:64:9e:47:76:d2:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:16:A6:28:9A:29:14:66:15:22:0E:DD:EE:F2:D1:03:D6:32:60
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:9f:c3:92:17:34:e4:9b:4f:0c:20:d6:52:9d:fb:10:aa:
34:60:a2:db:9c:f7:fc:2c:27:4a:24:10:a0:89:af:4f:57:7f:
3b:fa:3c:b5:ca:3f:69:9d:0d:a6:51:51:a6:78:7a:51:41:e3:
e0:b5:bd:ca:03:e0:57:d6:54:af:71:b7:92:93:83:b6:0b:aa:
f3:59:9a:37:c4:75:76:95:46:25:d6:cd:f8:fa:2b:2b:6f:e3:
1a:71:21:0f:9e:fd:76:69:9d:a2:bc:70:e1:ec:43:d8:72:93:
78:c6:c3:8f:d4:b6:09:0c:99:3b:ba:30:2f:97:d4:83:b7:dc:
a4:c6:2b:a8:b0:51:b2:1f:9e:b1:ac:be:d3:3f:fe:f7:ac:e6:
cc:b5:7a:e5:de:0b:99:5a:a9:b1:ea:7f:f0:8d:6c:bf:f0:fa:
97:ad:71:55:31:29:30:87:fb:31:65:89:80:5c:a7:db:00:3c:
36:4f:b9:4b:0b:6a:83:3b:35:86:7c:6d:6b:39:ca:4b:88:d5:
63:1a:6b:be:90:82:d2:58:f1:a2:12:49:92:2a:d8:ec:92:ca:
e9:71:83:57:f8:ba:8c:37:71:d5:31:90:22:1e:2c:c2:a5:f4:
01:13:1a:9a:c6:0f:d9:66:7c:50:7b:b9:bd:44:74:86:ae:6c:
ab:87:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:58 2025 by rpki-client