Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: wJ6BBo1S4VyNKL6td6yn46PrGnjR1f4hSPMzJCh+lKI=
Subject key identifier: 4C:24:1B:DF:0B:46:DD:20:F0:F4:2D:84:DC:EF:09:A8:44:A6:19:8D
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019A71B90928800D2C506C5840EB806D40D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 133B
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: 41WRrNhGs7s2qsxktoFnbm/Va+n9xgU+waEiz4eNCXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:09:28:80:0d:2c:50:6c:58:40:eb:80:6d:40:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=4c241bdf0b46dd20f0f42d84dcef09a844a6198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:3e:fe:63:ff:cd:ba:07:fe:ac:7d:75:11:
7f:c0:66:2b:14:b0:a1:e3:b6:1b:9f:66:99:4e:a7:
de:2f:e6:bf:06:14:0b:b8:1d:0a:1d:34:da:d6:70:
88:8d:62:60:2a:55:f4:c7:c1:50:f2:6d:d8:3e:92:
ef:64:29:1d:eb:23:77:5c:33:05:76:de:6e:4a:30:
b7:1d:07:f7:55:88:35:ed:ff:b6:dd:a2:14:ac:ce:
5c:ac:c3:24:e0:1a:21:71:2f:99:0e:55:f5:a9:85:
02:8e:87:a1:ff:b3:d2:b8:29:e2:27:69:f6:11:86:
f9:0b:2b:00:e9:4d:5f:97:48:8f:5a:6a:e4:b5:11:
36:3d:56:10:65:fd:8b:3d:75:89:e8:54:b5:3b:ad:
ee:79:65:2e:bd:8a:96:42:a1:69:83:a9:c5:aa:7e:
09:72:ce:bc:ba:4b:03:a0:17:15:3b:ae:44:e0:45:
e0:4f:72:e4:f9:e9:5f:a7:9a:36:ed:e8:38:47:c1:
c7:c5:d2:c9:95:bd:0b:4b:a5:2d:8d:bf:20:f8:ce:
66:18:8a:22:8b:fc:49:11:a4:b6:0c:b1:67:ec:02:
d1:f7:ad:3b:dd:49:49:b5:6e:6f:4b:fa:7c:19:e2:
42:2d:04:7c:02:a4:0d:87:41:b6:bb:1b:d2:37:cc:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:1B:DF:0B:46:DD:20:F0:F4:2D:84:DC:EF:09:A8:44:A6:19:8D
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:a2:4e:7c:8e:ce:53:e1:d6:76:39:40:88:ba:20:ec:c5:
18:46:e7:67:bd:bb:47:45:19:08:90:89:54:68:52:12:a9:dd:
a0:65:e5:e6:bf:9f:df:3c:1a:f8:55:8a:85:c4:85:21:61:70:
d8:75:04:93:52:c7:65:3c:43:59:9d:43:59:cf:e8:31:d1:b7:
ce:77:04:8b:69:be:a1:44:e9:d5:f9:d7:7a:2c:92:d4:bb:69:
7f:cd:c7:55:f2:a5:43:a2:21:3c:6a:83:df:c4:4f:6b:1a:24:
fb:45:96:eb:17:38:fe:6b:1b:a9:c7:18:33:d7:b5:da:6d:aa:
4d:0c:64:45:40:6c:18:b8:1e:ba:60:e2:1c:53:63:0f:56:f4:
7b:0b:01:21:fd:15:2d:39:38:b7:76:cf:f3:50:9b:ed:ce:18:
1c:93:b8:a2:cf:a8:ed:24:d4:d7:d0:47:11:00:ad:93:d8:c6:
c7:75:95:73:87:74:06:16:37:f6:ff:9e:a7:ba:f4:ae:c3:6c:
ab:88:3a:29:c0:ac:e9:8e:d2:53:76:a8:5d:01:e1:c9:29:a7:
8f:9c:45:d7:e5:24:90:9c:5e:08:b8:19:69:0a:7b:2d:56:4a:
3e:25:f1:46:e2:3f:92:87:0f:d2:63:29:dd:31:ac:f3:eb:af:
ba:ed:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:50 2025 by rpki-client