Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
File: O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json)
Hash identifier: talKc6sQTCWSBFdikBOm9w2giozt6K9o6d7NEXmc2TA=
Subject key identifier: 01:71:16:7F:5D:4B:57:4F:FF:A0:AF:0B:30:5D:53:99:76:63:AB:03
Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Certificate issuer: /CN=3b84523c3932e2d198046234b962e0dc51abf586
Certificate serial: 019923A047437497E60D03DFB76C81DF24AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:10 +0000
Manifest this update: Sun 07 Sep 2025 10:02:10 +0000
Manifest next update: Mon 08 Sep 2025 10:02:10 +0000
Files and hashes: 1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: XLEiwAjCDyWobJUaNdggwiAMwC0afMmgeupYeGeKI+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:47:43:74:97:e6:0d:03:df:b7:6c:81:df:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586
Validity
Not Before: Sep 7 10:02:10 2025 GMT
Not After : Sep 8 10:02:10 2025 GMT
Subject: CN=0171167f5d4b574fffa0af0b305d53997663ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:ed:87:d2:1d:95:a6:45:85:9c:bb:9f:4a:
dd:df:9b:75:22:9f:57:41:84:84:ca:f7:95:3f:63:
96:83:de:ef:cf:be:24:da:21:b8:90:2f:7b:d7:cd:
d3:a8:5c:32:d2:20:54:bf:74:e0:6e:bf:04:e6:1c:
d2:c2:47:f5:30:84:aa:52:74:d5:04:a3:ad:f5:50:
b0:91:f1:59:d0:bc:d9:b4:4a:a5:9a:f2:7e:cd:5b:
1c:57:4d:d6:8e:3f:cb:fb:8c:a3:c0:0d:94:79:51:
fa:ad:fd:a9:36:05:d0:b6:1b:b8:11:aa:7c:28:bd:
82:21:d4:5a:e8:1b:4e:f7:54:3b:bd:44:cd:21:26:
c0:d4:3e:fc:83:ba:18:73:cf:f1:db:23:04:b3:99:
c7:06:2d:53:a3:b4:b1:f7:3f:5c:96:89:8f:b2:65:
25:3a:9f:5b:8b:69:49:44:8a:ea:eb:f9:2f:f6:b0:
2c:82:74:ee:83:df:d6:c7:fc:db:fa:51:3b:3a:af:
60:a3:e3:8e:21:03:f1:40:9d:4f:f9:8d:52:2b:55:
f9:80:d7:03:d8:7d:f1:91:d2:1a:d4:7c:4c:de:09:
24:c2:29:fc:a9:c4:2f:11:a6:ee:51:6d:37:c7:8f:
71:56:74:a6:b5:43:2c:57:56:8e:8b:34:4c:36:5c:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:16:7F:5D:4B:57:4F:FF:A0:AF:0B:30:5D:53:99:76:63:AB:03
X509v3 Authority Key Identifier:
keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:27:6b:9c:fc:85:cc:6c:97:ba:40:9d:7e:55:b1:04:46:
93:62:1f:e3:87:e1:b1:17:f1:f2:2d:a9:99:4f:bf:55:9d:4d:
21:1d:64:9d:d2:b9:32:06:aa:3a:d7:a8:7e:ea:b6:06:7a:c5:
8b:49:50:87:82:3d:a8:86:99:12:d2:93:2a:8e:d8:39:7a:14:
49:cf:a7:3f:f8:ef:db:eb:ed:5b:00:7c:58:14:8d:93:da:e6:
e3:e1:c6:63:2f:f6:22:c5:f5:64:cd:33:6b:bf:5e:20:c5:34:
63:42:6f:a1:e0:dd:2a:80:f0:0a:66:5f:9c:51:a3:c2:73:72:
73:8a:b9:89:d1:84:5a:89:de:d0:60:43:d5:65:ca:a2:dc:ad:
92:20:40:26:d8:ae:d9:e4:a6:63:e3:8a:90:d4:4e:5b:b1:94:
9e:52:fc:c3:93:7a:18:64:39:f2:c4:d2:10:40:c9:42:7a:6d:
34:5e:f1:df:c5:2e:fe:24:bb:b0:0d:10:c6:22:a1:92:76:e0:
5e:63:b6:96:b1:e5:66:de:24:26:ec:d9:8c:91:ab:05:4f:52:
73:fd:67:1f:18:ed:e5:b1:62:c0:cc:93:33:a0:26:77:82:e9:
34:68:db:d2:b7:0e:63:3d:ea:ce:d6:ef:49:74:b9:6b:f0:7a:
3b:b8:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:04 2025 by rpki-client