Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
File: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft (raw, json)
Hash identifier: Yu3fATiOtJn+W83W2FEZsHmDIgRcrSMafMInPsl8Tgk=
Subject key identifier: 67:AE:58:96:07:9E:57:64:1A:3C:B2:9E:37:C8:A4:DC:D6:5A:D3:2B
Authority key identifier: A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
Certificate issuer: /CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Certificate serial: 0198477785956F3B437B89299130588235FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:01:11 +0000
Manifest this update: Sat 26 Jul 2025 16:01:11 +0000
Manifest next update: Sun 27 Jul 2025 16:01:11 +0000
Files and hashes: 1: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl (hash: paVknkot7jiIcGrAvnnoJNTvzdnfjWqD+9nlnBkKC3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:85:95:6f:3b:43:7b:89:29:91:30:58:82:35:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Validity
Not Before: Jul 26 16:01:11 2025 GMT
Not After : Jul 27 16:01:11 2025 GMT
Subject: CN=67ae5896079e57641a3cb29e37c8a4dcd65ad32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:38:3a:d5:20:e4:12:e3:59:6b:cc:9c:1b:
4c:e2:b9:8a:6a:51:d6:29:53:26:c3:01:39:5f:93:
f4:d7:bf:db:ed:63:27:ac:81:61:d3:0b:53:42:18:
a5:23:58:cb:c9:1b:e2:2c:47:8f:01:ca:1d:ed:d3:
7b:ca:9d:ce:16:d4:e7:29:8c:9d:5a:bd:d3:a8:06:
35:2e:d3:8c:5a:b3:0e:5e:88:98:ae:73:0a:44:5a:
e8:52:21:8a:74:fe:fa:de:1d:2c:ee:ca:2b:91:01:
e3:d2:83:6c:75:0a:72:d5:76:b8:79:80:ff:1c:fe:
b1:e2:33:17:fa:68:aa:be:76:d2:7a:de:c9:0f:d7:
41:03:33:29:a8:80:a8:02:6a:df:55:bb:11:c1:53:
ec:20:86:30:64:a3:77:69:0c:1d:e0:32:10:a9:4c:
1a:92:23:13:fd:e5:a9:9b:8c:56:1e:6d:d4:4c:47:
e4:57:06:26:7e:fd:95:d9:42:b6:2e:7e:12:f4:7f:
2b:6e:2b:b2:65:9d:40:aa:b2:45:42:c4:de:4c:7a:
63:53:26:d3:ef:05:07:0c:1d:5d:1e:9d:34:43:c0:
14:cd:6c:64:b3:6a:62:f9:6a:25:f3:f1:e8:7b:74:
e9:4d:08:84:e6:b3:a1:cd:0f:8f:6f:96:b1:f4:fe:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:58:96:07:9E:57:64:1A:3C:B2:9E:37:C8:A4:DC:D6:5A:D3:2B
X509v3 Authority Key Identifier:
keyid:A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:61:b6:77:ef:13:ff:8b:62:ae:1f:8d:06:e5:38:e3:17:ae:
4a:fd:64:94:9b:cc:c6:3b:02:94:8b:49:af:81:22:51:01:07:
91:41:35:39:72:2a:40:6e:95:7f:80:a2:10:6f:f7:b8:86:0e:
e3:18:89:82:da:b9:3d:63:1d:be:6c:37:81:24:38:66:d8:53:
38:f2:d0:3a:b4:18:c7:40:74:84:25:70:9f:87:7d:f3:e2:6b:
d8:2f:67:1a:10:09:a6:43:6c:59:5c:bd:35:b0:0b:f5:58:7a:
00:3f:16:70:da:56:58:91:b7:2a:42:e2:c0:6e:e2:07:4b:6f:
2b:12:55:60:87:b0:67:10:58:bc:30:90:1a:b1:21:97:55:7f:
0a:1d:0a:82:6a:9a:b8:0c:1b:a8:a6:93:05:1c:5e:0f:a1:07:
d3:19:f8:c6:45:73:d6:97:e6:b9:90:de:15:f8:41:56:f0:6a:
b4:20:ab:2f:e6:3c:42:c7:0a:0d:47:92:ab:1d:50:4b:99:38:
7a:5e:85:4e:a8:23:b9:e6:40:f7:c3:ff:bf:d0:a3:a6:cf:84:
7e:63:99:5d:d1:19:e8:18:1a:2d:75:02:c3:98:e6:25:ea:e5:
10:20:72:d0:2f:4e:fd:d4:45:c7:9a:fb:d8:ec:19:71:25:e3:
ea:31:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:06:14 2025 by rpki-client