Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier: +adBLIZ56iXE+Pa5hay8A/TYVjY2nR5+aRc2aXENmgs=
Subject key identifier: 80:02:51:C9:ED:40:7B:D9:E8:FF:0F:8F:33:35:23:1B:E7:B6:93:94
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer: /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial: 01985231B9D4CCAEB503469524D64C9BCD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number: 035C
Signing time: Mon 28 Jul 2025 18:00:47 +0000
Manifest this update: Mon 28 Jul 2025 18:00:47 +0000
Manifest next update: Tue 29 Jul 2025 18:00:47 +0000
Files and hashes: 1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: MkmIQJ4kz01tDaOkfVMr6Z5xtpAGY6z+dLNBhDcoCvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:b9:d4:cc:ae:b5:03:46:95:24:d6:4c:9b:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Validity
Not Before: Jul 28 18:00:47 2025 GMT
Not After : Jul 29 18:00:47 2025 GMT
Subject: CN=800251c9ed407bd9e8ff0f8f3335231be7b69394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:23:8a:1f:93:d1:81:a6:40:87:dc:18:8f:
82:1d:d9:e3:e9:40:cf:16:d3:c8:8d:4f:7e:2a:4c:
bf:84:0b:f5:9d:9d:57:22:ba:6f:f8:68:e2:4e:d6:
49:2f:60:2d:53:04:0e:60:62:b1:a0:20:c7:53:d4:
29:12:28:a6:cd:5e:0b:84:16:43:57:0d:2d:28:ae:
cd:31:8b:a2:12:a7:1c:eb:d1:3e:52:4e:05:e2:53:
b3:4f:1c:b5:af:d4:12:ee:84:76:25:3d:d3:9b:2a:
b8:8e:4c:35:0a:88:be:7a:16:94:fa:c1:c7:d1:89:
bf:50:23:27:fa:11:10:74:46:58:53:28:06:36:39:
bc:68:0b:c9:27:8e:7e:ad:0b:3e:82:a9:0d:53:9f:
b4:ad:16:47:9d:e2:6e:55:83:c6:a8:a3:6b:dd:7a:
d9:03:a4:42:bc:1f:b9:f9:a1:ef:ac:b8:b2:c2:da:
65:61:cd:68:80:c4:77:f9:bb:88:1b:45:75:1f:c9:
51:df:82:76:bd:e8:69:7b:c8:b8:2a:6f:36:a2:af:
18:97:cc:17:64:69:9d:35:97:54:75:11:25:be:61:
d9:54:25:ff:73:01:a4:31:2d:df:3e:b2:83:ac:5f:
53:9f:1f:51:d6:58:67:67:21:b6:a8:2f:fc:eb:cf:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:51:C9:ED:40:7B:D9:E8:FF:0F:8F:33:35:23:1B:E7:B6:93:94
X509v3 Authority Key Identifier:
keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:f1:43:82:0c:dd:ac:5a:f8:ea:cb:90:05:11:16:3d:1c:
fa:5a:84:d9:46:06:a3:ab:87:c9:34:af:7b:1e:37:1a:08:2b:
c9:ab:3a:3e:90:98:86:06:28:d1:6a:c7:bb:73:5f:28:41:6c:
38:50:f9:d2:b8:3d:57:6a:62:53:e7:60:69:db:86:52:d9:c1:
a1:1a:9a:d1:22:d8:2f:ba:53:d7:a8:d8:b3:e3:9b:46:e6:c4:
83:c3:65:3f:10:7d:d6:62:1a:2b:a1:01:70:6f:0d:68:9a:5a:
4f:be:5a:d8:70:6f:e7:0d:2b:d2:cd:12:db:17:d2:82:aa:ae:
ae:ee:07:76:2b:75:60:aa:5a:b8:8b:17:54:cb:49:e5:d9:b9:
ca:7c:54:0a:62:5d:45:7b:4a:4f:4e:df:17:d5:3b:a8:22:53:
9d:e7:f6:c3:5f:48:9d:f4:14:80:be:ee:c1:7c:36:7a:a5:54:
dc:a8:7f:c6:fe:58:56:b5:73:4b:9c:3e:93:22:53:40:13:23:
aa:32:82:75:5c:5f:40:0e:89:1d:80:40:e9:61:ab:32:19:3b:
f5:3d:8b:1f:df:30:ea:3e:df:d7:4f:c1:16:21:e5:e1:37:ed:
66:69:18:d6:05:23:f1:d5:2e:59:61:0d:05:c7:d0:c0:f7:f1:
c1:99:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:29:35 2025 by rpki-client