Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: EhLyde9LU2kZKZxAgV0K7KdU9tKqkcb7DWat5JDVAWU=
Subject key identifier: 0F:E4:D3:E4:C2:0F:EB:44:B9:D9:24:DE:F7:2B:5A:61:8E:B9:9F:A6
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 0199225526E2E78742507EE907957B783B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 0DE7
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: iZgdvVFdkiFpLcXM03gEYCnzB2t2Duch7QMszK1b8b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:26:e2:e7:87:42:50:7e:e9:07:95:7b:78:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=0fe4d3e4c20feb44b9d924def72b5a618eb99fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:14:2b:f3:e7:25:4e:36:2d:68:03:a2:96:
58:06:6d:a1:ec:7f:41:5d:7e:96:68:2f:ff:b4:cf:
ba:ee:90:c7:64:a1:b2:d6:cc:e6:fe:9c:5e:83:99:
36:07:62:e1:b5:bb:52:ba:d4:fd:cc:9e:f6:1b:4c:
17:5d:24:99:cc:72:16:90:cf:85:78:e1:88:ab:e4:
c6:4a:b5:4e:2d:76:9d:55:be:a3:d6:03:03:bb:b0:
d0:d2:c3:9e:26:f1:bc:b5:19:1b:7e:2b:36:ad:bc:
86:19:22:2e:92:ce:25:ce:14:34:49:b4:ee:1c:03:
d8:4b:e7:2a:66:12:fc:ff:41:83:a1:49:dd:8a:5a:
92:f7:4d:e8:8e:da:d0:a3:1c:f6:56:fb:cd:d1:4d:
ed:7d:7e:05:fe:58:77:43:4d:38:ce:d4:f5:8a:35:
11:1b:93:60:76:f6:d4:70:4c:19:4a:4c:de:99:45:
45:ef:27:57:aa:dc:2d:7e:35:ad:17:0e:14:af:e7:
b3:fa:1c:65:e8:de:fc:11:7e:72:e0:d5:4a:6f:b3:
e0:22:ee:18:41:15:3f:d1:3c:5b:db:a3:33:4e:69:
27:6f:e5:e2:96:f5:8c:f7:44:b2:97:ec:52:e7:84:
7e:df:57:24:32:cc:23:a4:15:2b:8f:e8:7b:a0:85:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:D3:E4:C2:0F:EB:44:B9:D9:24:DE:F7:2B:5A:61:8E:B9:9F:A6
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:70:a9:07:29:e6:fd:7a:67:87:bb:b4:1d:e5:4d:e5:9d:
66:1e:ad:0c:26:2d:b8:9f:98:c4:37:c5:4c:10:b3:d6:94:69:
86:d4:67:65:21:aa:7c:71:6e:b9:c8:31:ef:b9:a5:47:63:0c:
eb:5f:fb:40:fe:a6:35:6d:a5:8a:33:c0:e0:1b:86:c7:37:f4:
d8:74:00:0b:2e:ed:d8:7c:d3:18:66:28:a3:f7:8b:26:a5:26:
d1:b1:1e:f9:78:7e:ba:e6:7a:24:44:39:d6:e3:43:41:e7:d3:
0d:8b:fb:4f:db:5c:85:b4:37:b9:5d:e1:8e:33:57:0f:97:d6:
46:48:c3:6c:08:b9:5c:64:1e:7e:0e:5f:fd:b3:28:89:68:16:
f7:4f:77:84:39:77:cd:ec:19:94:25:ad:49:79:c3:36:9f:50:
ee:f7:a5:2a:6a:14:41:08:ad:9a:dd:90:22:20:48:d3:5d:d9:
41:c4:c1:0b:e9:27:be:e7:68:32:4f:eb:87:45:e8:1b:c6:97:
84:28:94:5c:ad:8e:21:97:78:c4:44:45:4a:df:da:22:09:bf:
df:d4:50:97:8d:df:02:e9:55:31:17:dc:ab:3d:84:70:8d:b0:
b4:21:3a:fc:7c:eb:99:58:b9:fc:2a:44:00:5d:20:7c:07:dd:
26:f5:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:06 2025 by rpki-client