Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: XcaHaWI2qpxKxPmY9O9EEGl9hyZKDc0D92IRj2CawYU=
Subject key identifier: EC:8E:02:14:55:5A:68:F2:3A:52:00:8C:DA:EA:A7:30:DE:18:6B:80
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 0199228C241FE2622B6A513DAEB71B6E222A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1662
Signing time: Sun 07 Sep 2025 05:00:33 +0000
Manifest this update: Sun 07 Sep 2025 05:00:33 +0000
Manifest next update: Mon 08 Sep 2025 05:00:33 +0000
Files and hashes: 1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: /n4K8eYdz0KJAh/SOXwKd9RVLpFhG18rOueNTrSyJnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:24:1f:e2:62:2b:6a:51:3d:ae:b7:1b:6e:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Sep 7 05:00:33 2025 GMT
Not After : Sep 8 05:00:33 2025 GMT
Subject: CN=ec8e0214555a68f23a52008cdaeaa730de186b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:5a:fd:30:c3:90:6c:52:6d:a7:b0:1f:19:
d9:d3:5e:d0:54:cb:03:67:5b:b5:8d:89:ec:c1:c4:
a2:98:52:49:67:8d:7f:a5:36:c5:50:7d:66:3e:81:
fc:ca:fb:3f:8c:3e:36:9d:b4:51:e5:14:4f:00:be:
93:52:bc:5c:ac:60:08:50:09:11:ed:00:c7:6d:72:
30:f8:97:99:5b:1b:9a:f9:2d:3b:85:38:8d:e9:25:
70:31:b4:2a:f0:f0:49:c2:f5:c8:a7:e2:64:12:f1:
43:30:3c:13:04:f3:f5:bc:fe:81:8f:a7:43:d9:6e:
e1:da:1a:c3:d1:a9:81:26:93:6f:38:b3:fa:98:44:
35:a7:b3:4e:cb:a7:67:db:33:90:61:45:1f:a9:46:
b1:d4:3e:28:26:f2:e2:87:2a:95:29:46:d9:4f:aa:
66:24:a8:81:70:9b:c1:79:d6:ec:89:c0:29:94:89:
ec:df:ea:74:b0:04:f2:9e:5e:09:34:c2:0c:50:00:
11:39:99:fe:6f:9c:7d:e1:ed:4d:9d:c4:12:82:15:
d3:0f:12:c7:a3:8c:b1:7b:2e:e8:30:64:a0:ca:29:
27:f9:30:bd:cf:96:38:df:35:3f:30:39:1e:72:89:
19:98:5a:5e:92:6b:a8:a5:f7:08:5d:13:9d:ff:9e:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8E:02:14:55:5A:68:F2:3A:52:00:8C:DA:EA:A7:30:DE:18:6B:80
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:90:ca:2b:c6:e1:1b:5b:3a:42:ff:e2:44:5a:a8:99:4c:
6e:58:5c:5a:82:76:fa:19:ec:ab:25:6f:e8:62:f1:99:f9:52:
03:47:5d:52:d4:fc:cc:a2:34:bb:8d:35:7e:b1:5c:62:95:8f:
c5:58:25:61:81:51:9a:da:84:67:82:8b:e1:67:4f:dc:c3:6d:
99:83:7b:88:91:69:a8:20:a0:fe:f8:d2:be:9f:83:c5:e7:0d:
92:28:54:22:b2:fd:9e:d2:1a:9f:34:bc:e7:a8:a0:4b:00:d3:
66:e6:b2:90:d3:97:a4:d5:1d:77:b9:c6:a6:8a:e3:a2:23:8d:
ec:d2:51:1c:59:b0:c6:ec:d9:b8:39:8e:c8:55:ac:79:fc:00:
f2:5c:97:f8:44:df:2d:f4:f8:4e:50:f3:46:a1:0e:8a:1b:eb:
e6:e3:fa:11:26:29:a7:67:f2:04:27:df:de:9d:bb:bb:c4:f5:
4f:96:4f:a3:b3:55:9d:96:ed:d9:40:fe:ea:b4:fa:1c:34:77:
57:7d:b4:a8:b8:bd:6b:50:3c:f1:b7:5e:07:21:38:b4:a8:93:
2e:1a:86:41:2d:19:58:73:55:6b:6f:13:10:c6:45:80:31:b2:
9c:98:ca:e4:78:f4:98:ac:1d:b4:c3:af:46:3c:7f:1a:c7:8d:
ce:fe:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:43 2025 by rpki-client