Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: Oql1XuNTZvUnBkqwufRcRu4CuZoUXSwg1M5Ga+Rraw4=
Subject key identifier: AD:12:FE:EA:F4:B9:8E:2B:93:16:E0:ED:2D:D1:75:D0:23:CE:CB:91
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019921B0B19D24E7F0563D772A1372D5AA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 128D
Signing time: Sun 07 Sep 2025 01:00:51 +0000
Manifest this update: Sun 07 Sep 2025 01:00:51 +0000
Manifest next update: Mon 08 Sep 2025 01:00:51 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: d8tI61aTFcKTdf8z2hrqW+Rr/ywIWvoADWyJkCSUmjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b1:9d:24:e7:f0:56:3d:77:2a:13:72:d5:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Sep 7 01:00:51 2025 GMT
Not After : Sep 8 01:00:51 2025 GMT
Subject: CN=ad12feeaf4b98e2b9316e0ed2dd175d023cecb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:38:7c:55:44:91:88:07:63:10:ea:38:bd:
f0:a0:83:7b:ed:02:39:04:72:a8:78:eb:38:93:8b:
12:24:93:75:de:b9:b1:af:05:86:48:92:29:f6:d9:
79:d3:ef:37:84:5b:c4:1c:46:c6:02:ca:37:d5:b7:
4d:30:e3:86:09:b9:0e:1a:4b:b4:b3:ec:9d:0e:48:
1c:d9:0e:d7:d0:fe:28:df:ca:5f:9d:d7:1c:57:b5:
08:f1:ce:6c:b4:2b:3d:1f:db:7f:d0:0b:0a:82:be:
27:78:ff:fc:2a:3e:ea:fe:1f:4c:e0:10:de:d3:de:
5f:c6:81:e4:72:4c:80:4a:3b:b5:79:15:3e:2d:07:
c5:4e:39:32:ff:1d:8e:c3:f5:63:1e:d7:36:e3:e5:
cd:00:de:30:60:cc:93:26:88:ce:c7:2f:35:cd:e4:
da:6b:11:62:04:c0:3a:4b:66:8d:c9:3c:19:a2:f2:
34:da:a8:9d:a0:9d:c5:b0:32:5d:25:2e:18:8c:7d:
61:ea:6c:e9:58:fb:6f:c5:a6:ac:76:7f:a5:48:f2:
3b:18:83:fc:07:39:33:70:84:40:78:c9:25:ef:3e:
31:91:6e:97:12:4e:cf:a5:cf:b3:29:2b:0e:0b:e6:
93:c8:60:80:2c:fa:24:d9:21:ab:42:66:f8:58:d0:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:FE:EA:F4:B9:8E:2B:93:16:E0:ED:2D:D1:75:D0:23:CE:CB:91
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:e1:7d:4a:02:26:6d:f4:c4:d8:62:fb:86:07:34:ef:fa:
2a:1e:63:be:01:e5:08:3e:57:64:88:53:6c:4e:44:93:3e:a7:
bb:1a:b3:86:d6:4d:71:86:cf:2a:ce:02:24:5b:72:9f:2d:1d:
f7:c3:09:63:3e:82:6d:ff:ef:82:76:e8:3d:cb:9c:d3:94:4c:
9c:3b:47:93:1a:cd:cd:19:5e:68:f4:6c:ca:60:7e:a1:46:57:
04:93:17:51:ef:5e:46:ab:1f:2d:f7:78:2a:bf:0e:68:9b:83:
3e:c3:4f:7d:60:fa:e4:be:9a:ff:b8:18:c2:ad:dc:1c:6f:19:
2f:58:54:0b:ec:7f:be:9e:e8:4c:08:22:75:fc:e1:61:11:46:
7a:2f:03:d6:cd:50:62:e6:b4:8b:67:b2:f6:43:93:ac:ca:8c:
13:fb:cd:c5:c9:6f:8b:77:e5:9a:52:2e:8e:5e:83:32:b6:f3:
93:6c:24:3c:e7:3a:30:52:c4:1a:3f:bd:70:b9:51:9e:4f:a4:
ab:af:5b:fe:a7:9d:ad:66:8d:45:4f:52:7b:7f:21:af:34:16:
17:c1:c2:29:44:72:2d:c1:ff:3f:87:ed:ad:be:41:d4:97:48:
bc:16:10:0d:67:0c:27:4c:68:34:00:5c:36:c8:7d:e2:fe:2c:
c8:a9:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:17 2025 by rpki-client