Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: Y9YYqifCafY5iWPxamW8GdwIKkaqQinHsgex5nHj4wA=
Subject key identifier: 21:5B:3C:61:AE:42:52:47:69:5E:31:3A:E8:EE:A2:D5:7C:61:B4:E3
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 01984A415BDAD0E8E682107454521FE24428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 0F7D
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: As85et7ux1mCIrYY5A55vdqMNC1ccDu2DebzL2xnKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:5b:da:d0:e8:e6:82:10:74:54:52:1f:e2:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=215b3c61ae425247695e313ae8eea2d57c61b4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:f4:7e:e1:83:b3:d2:1d:dd:cd:b8:b6:a6:
b5:25:60:7e:97:89:14:c4:02:21:11:ae:63:cc:4e:
0c:98:ab:31:99:5a:c1:3c:87:59:22:c7:9d:e4:67:
30:af:48:5a:c8:45:ec:67:f4:2e:5c:b0:c7:64:20:
4f:24:40:38:ff:76:8d:4e:89:ec:54:01:28:42:18:
f2:3d:74:03:a1:0e:cb:a3:1f:8b:91:94:d7:c8:55:
e3:cf:1d:17:bb:aa:84:c4:6e:2d:4f:5f:bc:54:d8:
ce:49:7d:10:99:12:bd:72:cf:2b:79:d9:db:48:9c:
d7:e9:91:93:7d:6c:69:56:c2:a5:d4:18:da:9c:ad:
59:9e:c6:83:57:19:3b:52:3d:ab:22:1b:2a:27:8b:
fe:93:2b:99:50:5e:cb:18:0a:23:fc:1f:64:27:06:
87:c8:d0:a0:84:32:12:3a:bb:1b:03:1a:4f:8c:b7:
7c:d3:04:c9:6f:80:61:cd:b5:47:82:66:ef:19:63:
21:0c:fd:d6:0d:bd:fb:72:1c:a2:0b:d9:3a:66:37:
07:ae:75:ea:38:9c:fc:3b:31:0c:7f:c6:1e:b4:21:
15:68:52:6e:08:4b:c9:9a:20:19:9f:ec:38:40:a0:
db:da:51:b4:0b:80:83:f0:2d:79:1e:de:e8:e7:6e:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:3C:61:AE:42:52:47:69:5E:31:3A:E8:EE:A2:D5:7C:61:B4:E3
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:62:dc:32:cf:b2:15:6b:1e:4c:d1:bd:16:5e:b2:fe:4c:
9c:66:5a:ca:eb:b2:33:26:40:24:76:28:aa:51:8e:23:0d:45:
a2:ae:9e:1a:bf:a4:5e:7e:ef:c2:cf:f3:f9:55:5b:9a:a9:f2:
68:c6:c6:0e:b4:5b:45:38:32:ca:99:8c:cb:09:b3:21:41:e4:
09:c0:82:61:14:ee:fe:b2:d7:d5:08:2a:db:e0:70:c8:79:77:
80:fb:bd:a2:2b:72:06:3f:1b:33:f0:06:1f:38:e4:91:15:24:
45:41:1f:f7:21:14:a6:57:c4:6e:b0:2a:90:5f:ad:e8:3b:fc:
0c:f4:1d:03:c4:db:39:9b:74:2f:54:c1:8c:b3:7f:fa:c0:3b:
fa:16:2c:ca:01:88:60:a4:1c:84:e2:d6:9d:79:f2:71:30:3a:
c4:df:b9:8d:04:c6:08:58:e0:a6:1b:10:e5:52:10:8c:a1:8b:
6b:7d:c2:ad:9d:f3:a9:da:ca:f3:21:ac:7f:fa:47:6a:bf:51:
6d:88:8e:04:45:f5:b3:14:b2:6d:15:b5:1b:32:ea:14:e7:02:
9c:30:49:07:0b:28:08:c7:22:d5:4e:6e:62:5e:2d:7a:c0:b2:
dc:4a:4c:b0:44:32:5c:75:19:10:e0:9e:c8:52:68:5f:65:c8:
20:f0:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:30 2025 by rpki-client