Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: OXKp83/S2HApy4wHhUwDrsl0jORy0I44cfKZWltUhsg=
Subject key identifier: 97:65:65:3D:4D:A7:E3:29:04:DF:10:5B:6D:4E:A0:E3:2E:C9:87:7A
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019921B17DB1BF2A3A9047BAB12A00C626E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:01:44 +0000
Manifest this update: Sun 07 Sep 2025 01:01:44 +0000
Manifest next update: Mon 08 Sep 2025 01:01:44 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: JFsQ4/sl37x3mReLmHsO2n6XtnCXYYC7MtzzvCEzfnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:7d:b1:bf:2a:3a:90:47:ba:b1:2a:00:c6:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Sep 7 01:01:44 2025 GMT
Not After : Sep 8 01:01:44 2025 GMT
Subject: CN=9765653d4da7e32904df105b6d4ea0e32ec9877a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:68:a5:43:7d:0d:62:a7:72:e0:96:29:98:
0d:fc:1c:fd:e2:eb:b6:38:b2:5a:6f:0d:97:d8:7b:
b3:f0:1f:12:e8:98:f0:eb:7e:2f:ec:aa:db:3e:3d:
13:ba:0a:9a:32:74:ec:16:9f:11:b2:b5:27:f4:df:
7a:e0:7a:ae:37:e7:b6:79:cd:91:0b:f0:52:e9:ff:
ec:3f:0c:c0:0b:a3:a2:43:1d:30:2c:93:9a:df:7c:
0b:d2:3b:23:21:a3:42:19:31:a5:c8:eb:88:a0:d9:
e1:31:72:09:20:90:bd:0f:ae:73:25:0b:a7:4f:55:
32:e9:a2:7b:c7:94:da:a7:7a:e6:a0:2c:e7:7b:b6:
1f:e5:d6:85:0a:51:5b:92:32:a9:24:56:e8:15:25:
4a:af:e1:b7:ff:ee:89:f8:ad:57:8d:cc:ce:2e:91:
7a:8d:85:1c:7a:d9:85:b7:99:d2:ed:db:6c:d6:cc:
ee:53:ba:8b:f2:e0:8f:9f:04:32:94:b4:4a:0e:d4:
aa:63:07:d0:91:10:4f:1e:01:18:19:38:4e:eb:c4:
82:a2:ef:b1:0b:a8:6e:da:4f:fa:72:2c:18:ba:20:
aa:c3:76:ab:91:b1:0a:73:ee:c1:13:f5:b1:02:ca:
4e:3f:5b:9e:64:e1:a7:21:37:1d:13:12:72:60:f7:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:65:3D:4D:A7:E3:29:04:DF:10:5B:6D:4E:A0:E3:2E:C9:87:7A
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:e6:c7:99:e5:2e:47:ab:93:88:85:6e:8d:ae:c2:a4:c6:
f8:d9:06:ac:ce:3d:a0:ff:90:bc:e7:a7:f3:a1:44:ff:34:ec:
9b:c1:fe:7e:6e:c9:c3:a0:30:d5:53:85:ec:83:d2:9c:b2:0d:
96:3b:23:ad:e7:5f:4c:cd:26:e7:57:e2:7d:c2:84:be:5c:62:
6e:35:3e:6f:d2:5c:38:aa:5d:53:17:40:ea:8e:31:ee:06:59:
91:d0:5a:fa:81:22:35:40:4c:a4:5e:f3:1d:85:06:35:bd:e3:
96:b8:a7:6f:b5:8a:bd:d8:82:f8:4d:9a:9f:3a:be:48:3d:e3:
8d:db:04:88:c2:4d:d9:c6:0d:4c:e7:f4:26:33:09:d4:22:64:
45:f6:67:5e:53:d2:11:7d:fd:9d:e0:0e:8c:85:7d:90:22:c9:
99:b9:b4:28:28:87:2f:20:a4:db:4c:a6:a7:26:5c:5f:13:2a:
b0:79:f2:65:88:a5:40:b2:70:79:21:79:8e:8f:53:e0:3c:bb:
8a:c7:20:37:03:dd:bb:b6:21:f9:09:bf:f1:f8:bf:17:45:42:
ad:f6:17:67:5c:6f:52:1b:49:dc:0d:67:0b:88:9e:ad:1b:e9:
0d:0a:3d:2b:5c:96:c6:93:31:6b:1f:8d:9f:ba:96:d0:c4:70:
5c:5a:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:32 2025 by rpki-client