Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: /AHl611xdXiAEdCnMgDoHQ70JQIRd1KHbjIsfKSrSeo=
Subject key identifier: 39:47:76:F1:93:82:12:ED:94:69:51:D7:35:B5:17:19:6F:59:D8:19
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 01992255B8341DEB2BA7DF260C0B65A881BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 0563
Signing time: Sun 07 Sep 2025 04:01:06 +0000
Manifest this update: Sun 07 Sep 2025 04:01:06 +0000
Manifest next update: Mon 08 Sep 2025 04:01:06 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: I79CJyfBTQFEkHmfDCpuJrrMnGBzcFBs841gC3k8fWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b8:34:1d:eb:2b:a7:df:26:0c:0b:65:a8:81:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Sep 7 04:01:06 2025 GMT
Not After : Sep 8 04:01:06 2025 GMT
Subject: CN=394776f1938212ed946951d735b517196f59d819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:6b:38:7c:d0:ca:73:22:52:46:a1:81:f7:
6d:fb:28:b8:ff:b4:6b:03:f5:33:6d:3c:1b:e7:c5:
22:cf:69:98:ee:e3:87:80:38:ea:7d:74:8a:ea:fb:
11:aa:b9:b5:92:06:0f:f8:c2:6a:40:39:d7:2e:99:
6f:a5:e1:77:f1:e3:f5:41:e1:1b:c9:7e:dc:1f:9c:
ac:c9:64:66:8b:64:d4:99:d4:11:20:58:be:2e:77:
c3:28:40:2b:8a:a9:74:97:3a:01:30:26:40:6b:1d:
0a:66:8e:12:82:4a:b7:7b:85:dc:70:e3:c7:e6:86:
6d:5f:6a:38:b2:57:27:cf:64:72:fd:45:18:2a:09:
db:a8:1b:be:67:9d:f1:53:47:1c:61:2b:6b:75:73:
5b:ec:f5:c1:59:ce:21:b9:9b:3b:3d:5a:18:f7:c2:
52:90:0f:66:d3:cb:ca:82:21:12:b1:ee:c3:8b:81:
35:d2:45:8b:3f:c5:1c:ea:71:06:5b:7b:76:b7:60:
af:89:85:cc:a5:12:b8:b8:81:7c:5b:9b:84:5f:1a:
04:66:15:b2:2d:d3:1c:34:ec:59:12:ea:50:0e:c3:
50:0d:ba:b9:57:c9:d8:c0:04:31:c3:cd:21:64:e1:
31:58:16:ec:55:bb:2c:52:ab:98:2c:9a:8f:c7:76:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:76:F1:93:82:12:ED:94:69:51:D7:35:B5:17:19:6F:59:D8:19
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:3e:9d:f2:e7:51:12:0d:df:be:16:b3:e1:5a:2e:ff:4b:
2a:dc:a7:71:a9:b3:2d:7d:f5:ab:ff:4d:a0:ce:a0:4a:2a:af:
4e:be:b4:8b:8f:5b:da:a7:e9:18:78:83:08:ed:d4:c7:8f:e5:
39:e6:39:53:76:f3:cd:54:6a:b3:3a:22:9d:1d:3f:bb:d5:20:
77:62:90:ec:96:45:08:05:6a:3a:9b:63:06:32:b3:39:11:5d:
8b:9c:f4:04:d5:22:42:25:62:94:b6:1c:80:d1:24:80:ad:4d:
13:7a:f4:1a:68:72:09:c1:81:d7:90:c4:00:3d:51:6a:8d:ee:
4f:54:8c:07:45:55:ba:d3:30:a6:1a:a2:12:9d:23:ce:e4:46:
8a:96:4e:0b:8e:c6:97:9a:9b:fa:43:65:3e:fe:33:63:48:15:
78:6e:28:0a:3b:3a:04:82:9f:49:21:76:ad:dd:a6:2c:07:03:
3a:59:e6:5a:c2:ea:01:f1:1d:6f:91:ed:25:36:be:04:1f:f9:
47:c8:26:6c:58:88:ac:61:84:c3:c0:af:af:72:f7:a4:d4:ed:
8d:f6:3f:9d:d1:11:73:3b:77:ff:b3:b5:0c:23:49:0d:d4:27:
a5:3b:bb:5e:a3:11:d4:52:7c:e2:40:2f:6b:6b:9a:a0:e7:98:
ec:ec:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:45 2025 by rpki-client