Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: o/p8pdO36FL3RofytJAu7PsJpSvH6q4AznDBv1TnwaQ=
Subject key identifier: 1D:5D:B0:16:84:DE:05:4E:16:5B:DD:6B:2B:8B:91:80:EA:4B:5A:89
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 0199239F4256E3DE783D82424779C717D667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 115F
Signing time: Sun 07 Sep 2025 10:01:03 +0000
Manifest this update: Sun 07 Sep 2025 10:01:03 +0000
Manifest next update: Mon 08 Sep 2025 10:01:03 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: FEhe7qIdYGfaxUMyIsxzU1nlVuZEAOotyGiF/Igwdfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:42:56:e3:de:78:3d:82:42:47:79:c7:17:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Sep 7 10:01:03 2025 GMT
Not After : Sep 8 10:01:03 2025 GMT
Subject: CN=1d5db01684de054e165bdd6b2b8b9180ea4b5a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:d1:30:71:2c:78:ba:0d:d7:28:44:d0:f3:
bb:85:2b:39:e3:da:f1:3b:3a:34:f7:f1:98:ab:16:
28:87:34:00:65:f7:27:d6:39:fd:a5:1a:e4:d6:87:
30:57:0b:7a:42:f9:27:8d:48:0e:8f:42:ca:1f:4c:
5d:d8:49:76:ba:d1:55:dc:44:fe:6e:b2:00:8d:53:
8b:2c:81:85:c8:e2:b1:b9:fe:35:d5:a8:4b:80:aa:
a3:70:08:40:63:7c:55:b6:9f:85:5f:ff:29:f7:39:
29:0b:2d:0e:65:c3:ee:f4:a0:48:39:aa:94:03:ba:
0e:64:d7:bd:d6:eb:52:e5:56:db:e1:e2:5e:9f:7a:
21:b4:73:83:30:e3:85:6f:b5:5f:9f:bb:6d:f0:81:
94:65:d7:63:90:81:f3:de:36:c7:f9:d6:6b:a2:2f:
49:45:16:38:90:06:e7:cf:31:04:05:18:55:a5:84:
b3:85:e8:28:e5:e2:44:0d:82:c5:53:75:a8:89:86:
af:d3:59:38:08:16:89:76:b5:80:51:13:30:e9:e5:
39:db:38:ff:8f:87:f2:f9:42:9e:91:68:49:b8:4a:
af:5c:fb:4b:b9:4e:cc:6e:35:fc:02:50:a7:a7:96:
75:cc:40:c1:08:f6:db:c4:4e:a7:f3:6a:74:77:b9:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:B0:16:84:DE:05:4E:16:5B:DD:6B:2B:8B:91:80:EA:4B:5A:89
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:c5:54:76:dd:68:d9:e0:40:ac:87:77:e9:0f:3d:2c:26:
22:4e:da:c2:98:a2:73:ad:04:19:c4:42:b3:8f:87:33:09:ab:
4f:0b:48:f6:9f:51:63:78:12:7e:83:d8:b3:01:73:9a:a6:29:
e9:37:25:e4:e3:e9:33:f3:34:5e:56:d8:a0:5d:f6:eb:82:26:
54:21:50:a4:02:b1:4d:ba:4f:02:85:89:ab:00:cf:fe:8c:6f:
89:db:46:3b:d5:53:33:35:77:16:2a:c9:24:34:11:92:b1:96:
7b:d9:f9:65:fb:84:18:f7:e4:a1:7b:c2:9b:63:cd:8e:a3:bd:
83:14:4b:fd:8e:70:cb:cd:a0:60:b3:9c:ab:fd:22:2d:39:27:
2a:b7:56:f3:e2:a7:ea:1b:ee:9a:ff:c4:04:3d:83:a2:a7:74:
e1:1d:31:99:e4:de:89:97:86:96:01:cc:b3:06:ff:7e:45:91:
f3:45:6e:c6:d0:77:c0:ff:22:e4:e3:99:28:9f:b9:ba:68:30:
51:02:ea:96:4e:38:ed:35:f8:4e:17:25:c8:ea:2e:de:c9:b7:
bf:0e:24:f8:7d:2e:bb:3b:7e:b2:8e:11:09:af:08:c7:18:23:
4f:82:8b:d9:31:1a:39:d3:d2:81:c7:74:98:62:98:36:a8:e0:
58:06:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:59 2025 by rpki-client