Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: yq9Yfn99KC0y/njjnh7l8q4cMvjJ95GhC2PeO7O+SJ0=
Subject key identifier: E0:D4:0C:7C:94:25:64:21:A7:A0:2C:1A:49:7F:84:FC:FC:7C:6E:2E
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 019921B20577B2F8D72B9DDAF76814FCD488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0DCB
Signing time: Sun 07 Sep 2025 01:02:18 +0000
Manifest this update: Sun 07 Sep 2025 01:02:18 +0000
Manifest next update: Mon 08 Sep 2025 01:02:18 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: QTq27il3mBFW9PYo1Mv16t3oPkKmtL4JU4d2smEMBv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:05:77:b2:f8:d7:2b:9d:da:f7:68:14:fc:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Sep 7 01:02:18 2025 GMT
Not After : Sep 8 01:02:18 2025 GMT
Subject: CN=e0d40c7c94256421a7a02c1a497f84fcfc7c6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:33:d5:15:45:ae:dc:2c:bb:eb:8c:eb:10:
8e:02:aa:e5:4c:cf:d7:5f:9b:f0:c0:f3:d1:85:50:
09:36:15:97:97:5c:a4:c0:8b:70:9f:24:db:e0:45:
69:31:f2:f8:46:bb:f5:49:87:02:38:47:79:10:63:
68:8f:94:75:6c:23:c0:90:3e:79:63:de:78:df:f0:
1a:65:54:73:a1:48:03:11:9f:fa:9d:22:23:75:a8:
8a:39:20:23:29:53:7d:98:d8:5e:86:33:a8:58:94:
34:e0:fb:1f:10:b5:a2:1c:05:90:81:df:e6:1d:cc:
d0:aa:ca:51:98:8c:aa:83:34:5a:e0:24:62:e9:e2:
8e:93:78:0f:36:8a:5c:ca:12:b6:10:01:bf:31:bf:
6c:37:4f:1a:e3:19:46:ea:ad:89:64:52:c7:4e:81:
15:0d:1e:f5:39:f7:3e:5d:3a:8a:87:46:e2:af:78:
86:6c:3c:87:3f:87:30:dd:0d:db:cf:35:df:e9:42:
f6:d4:c1:64:91:00:30:7d:ae:2e:60:89:c2:dd:42:
69:33:4a:d0:90:7b:12:0c:f4:d8:e6:98:42:97:26:
89:98:c6:c8:38:3a:58:ad:c5:2e:af:f7:de:7c:30:
e3:7c:2f:40:df:d2:af:4d:b1:4d:ac:c1:05:56:a4:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D4:0C:7C:94:25:64:21:A7:A0:2C:1A:49:7F:84:FC:FC:7C:6E:2E
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ec:30:f2:24:75:50:f5:b7:da:a0:8f:aa:e1:ef:20:0e:e3:
18:13:02:87:f9:12:6b:12:0b:92:fb:0a:f0:13:d0:73:f2:91:
37:38:21:a0:75:b7:5b:95:f2:64:30:22:98:bc:2c:f0:42:1b:
11:3c:69:27:83:b3:04:ce:04:ca:7c:63:8e:4b:b0:9e:bd:3f:
fe:fd:27:12:97:e3:8f:58:50:88:16:7f:71:9b:8f:c0:36:1f:
84:eb:af:4f:63:f9:0d:14:5e:40:01:30:71:c4:f7:ed:ff:a1:
df:aa:9c:88:63:75:21:96:2f:51:6f:29:75:94:5b:3f:a3:a9:
1a:19:e6:17:a2:22:6c:f4:ea:02:b2:f9:9e:d5:b4:d8:1d:00:
88:31:60:15:d4:54:1c:7c:05:49:65:5b:43:26:00:bc:2e:65:
5b:a7:44:ea:95:0d:1b:f6:08:c4:7c:aa:51:9d:b5:e6:1b:54:
54:3e:7a:a8:57:21:9a:92:de:5c:9f:a5:e1:49:17:72:7e:ed:
9d:c8:e1:30:5b:63:c0:9c:24:5c:f5:31:10:21:69:63:42:45:
07:f7:31:82:57:22:ed:9a:b2:30:34:87:15:a6:50:7a:c9:ff:
76:e2:4e:0b:c7:f2:2b:66:d7:ac:bf:19:ef:e4:75:31:2a:91:
8f:bb:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:18 2025 by rpki-client