Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: HCBYSyRZt3i9gZKIfe18mzaENGUzuCa+23RlCeolWVo=
Subject key identifier: E7:E8:5D:F4:1B:22:7A:9D:A4:26:15:DC:B3:37:B1:EB:22:10:24:37
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 019921B274A1BC66CECBA8D103245AAC8956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0FEB
Signing time: Sun 07 Sep 2025 01:02:47 +0000
Manifest this update: Sun 07 Sep 2025 01:02:47 +0000
Manifest next update: Mon 08 Sep 2025 01:02:47 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: VTR0Le/JPjdchgwINWFJkSdYk8+imY5x+y8xdb6zhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:74:a1:bc:66:ce:cb:a8:d1:03:24:5a:ac:89:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Sep 7 01:02:47 2025 GMT
Not After : Sep 8 01:02:47 2025 GMT
Subject: CN=e7e85df41b227a9da42615dcb337b1eb22102437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:b4:e6:cb:6c:e4:ba:d0:9d:2d:88:8c:d7:
d0:52:56:06:4c:ca:3d:33:7d:13:96:a4:7c:dd:e2:
f2:cd:79:e2:87:84:9a:24:a3:b3:63:84:a0:88:20:
b3:72:4e:16:1d:35:a6:69:91:97:01:48:26:98:8a:
89:7d:50:ee:17:ab:2a:08:00:97:e0:be:75:41:2c:
d3:06:2e:36:a2:39:70:bf:fa:a2:97:cf:58:88:c2:
41:bf:18:89:01:2c:65:33:f6:65:32:ca:2b:0e:9d:
ce:02:87:03:58:15:18:f6:5a:d8:47:ee:8c:49:88:
d8:44:1d:f7:64:aa:0b:51:49:08:e2:f8:5c:7a:59:
0b:07:f9:b7:e2:9e:0a:c8:d4:e2:23:3f:0a:e8:f2:
49:c1:c0:3a:83:ef:d7:b1:4e:2d:1d:c6:2c:52:f3:
89:de:7b:c7:c1:7d:6f:dc:97:12:33:50:34:74:06:
06:81:cd:c4:1f:3a:c3:34:62:8d:c2:4b:42:e7:d5:
4f:e2:3d:d5:fe:ca:63:17:15:37:dc:30:4d:a3:e7:
96:b5:53:bf:e3:e1:32:43:91:6b:0c:5f:b4:86:27:
14:73:a6:13:07:67:94:b8:63:af:e0:98:f1:d5:6b:
2c:a3:6f:76:3c:4f:9d:45:ff:c6:2c:b5:d3:5b:81:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E8:5D:F4:1B:22:7A:9D:A4:26:15:DC:B3:37:B1:EB:22:10:24:37
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:50:98:d2:d1:96:54:48:05:53:33:df:36:3d:dc:5a:90:
32:be:e0:3c:aa:da:50:b0:bd:4d:42:c9:30:6b:24:15:b3:52:
c7:03:d5:8a:f1:1d:9d:93:ce:6a:f5:22:dc:97:7a:fd:26:98:
31:6c:71:09:3e:53:54:86:d7:a5:f1:ad:d1:97:33:36:90:66:
9f:ed:21:6d:1a:7a:46:cf:b0:73:b4:50:8f:29:62:ad:c7:71:
b1:91:84:49:ba:d9:26:de:c5:fb:65:aa:2f:ce:03:4b:8a:a8:
7d:bd:d4:41:f7:3c:05:33:d9:38:f4:6f:ac:c0:90:ef:20:c5:
a2:30:1a:6d:74:bb:07:ed:f3:23:a6:19:9d:12:73:e8:19:0f:
82:cc:90:a5:e5:07:90:eb:dd:51:00:38:ef:ff:bb:f1:e0:db:
b0:2c:32:9f:f7:be:25:82:10:12:15:d3:47:09:83:20:18:c5:
0b:56:bc:08:5a:c2:90:6c:eb:5f:cc:6a:b8:b8:0b:f5:1a:39:
eb:84:44:27:6c:e6:9d:37:c3:08:c3:84:2c:a0:2d:50:10:25:
7c:c3:77:66:e1:f6:81:5e:51:7f:10:00:f6:ca:16:e4:ac:c8:
18:c7:3a:db:df:ca:62:c8:4a:a9:c4:b5:1f:e0:cc:9a:a7:80:
19:6e:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:25 2025 by rpki-client