Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json)
Hash identifier: 4sKCP7X0fonQ2Y3WxzbJ13WAoz7FVyIKGiR7xYW2Rfk=
Subject key identifier: 38:80:F0:0C:7C:80:A5:50:93:23:B6:BB:8A:0E:E6:7B:33:3C:3D:22
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 019A7225B849BCA17BC1CC65AB2A9117D966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: mJRm3xVHDEDxPgmkrmKhwL3V9wK6hnVRAGTme+ZrJSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b8:49:bc:a1:7b:c1:cc:65:ab:2a:91:17:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=3880f00c7c80a5509323b6bb8a0ee67b333c3d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:bc:45:3b:f6:30:0b:b6:04:5d:9c:f4:36:
e6:d1:5a:81:10:c3:91:98:87:ea:e4:36:71:ec:b1:
07:a4:35:ed:39:39:89:c4:45:6d:56:1d:2f:31:60:
3c:8a:45:da:73:32:e7:41:b0:17:63:25:82:61:e5:
c2:18:7e:b2:ec:ea:9e:01:14:b3:f9:b0:17:a3:d9:
e4:26:6b:28:e7:28:49:15:cc:5e:44:78:e8:a7:78:
e0:e0:a6:dc:f4:08:a5:c4:41:e2:37:10:ea:34:65:
8c:1c:21:d0:2a:f1:4b:dd:fc:b6:98:6c:bd:83:76:
62:fe:bc:49:84:41:7c:66:e1:b4:71:92:99:b4:3a:
69:22:84:0c:b6:64:8c:7c:43:cf:25:e8:ad:63:33:
5b:fc:fb:8f:72:18:c0:c9:ca:f7:74:24:db:9b:25:
03:b8:04:9f:e0:41:dd:8c:14:6d:f1:47:ef:02:64:
24:93:33:d2:8e:9f:a3:2c:08:86:79:48:db:26:5e:
90:ad:5a:44:b6:26:3b:c9:be:e0:cd:2d:94:06:cf:
52:6b:2f:98:de:18:6b:e0:51:01:7f:aa:fb:6c:0b:
ab:60:ce:e5:b1:09:da:92:b0:c7:24:fb:cb:99:0a:
30:8b:aa:4e:5f:52:52:a8:39:80:34:c3:4f:d3:47:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:F0:0C:7C:80:A5:50:93:23:B6:BB:8A:0E:E6:7B:33:3C:3D:22
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:7e:31:21:68:b2:1a:1e:2e:99:44:43:fc:5e:07:b0:4f:
3e:53:d9:f6:55:f0:48:f6:3b:8d:fc:ef:c2:a5:21:36:30:a2:
51:bd:ed:62:db:95:70:7b:81:aa:e5:d0:12:ae:c2:bf:0e:9b:
51:56:94:22:56:56:b6:b0:cc:77:57:e5:21:fc:4f:7f:21:0b:
f5:cc:68:c5:1e:0e:14:f3:23:d1:a2:31:3f:45:66:85:4a:29:
54:28:4e:85:6c:13:11:2e:0a:c1:59:9b:b9:17:74:86:20:48:
07:df:a1:08:3e:4d:89:20:13:d3:ce:01:d8:3e:78:7e:31:4a:
74:1a:cc:4c:e4:8b:af:c6:20:28:0b:5d:87:76:df:17:db:fc:
3a:ff:02:c0:51:91:34:2b:f4:46:d1:6c:39:ec:70:1c:e8:df:
d8:9a:0d:9b:8d:24:b5:5b:d4:07:a2:43:db:ab:47:43:32:65:
c1:92:2f:2b:d0:9a:87:f2:37:a1:ab:87:a7:49:78:4c:c5:38:
10:6c:f5:b8:89:b1:15:ec:b6:a1:25:e8:42:a9:7c:fb:d3:e5:
75:c0:0f:72:48:ae:61:c6:14:2f:13:a2:13:50:5c:cd:ad:e2:
79:91:58:21:e5:c4:8f:f5:10:d5:99:97:79:2c:50:b5:9a:ca:
ff:61:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:17 2025 by rpki-client