Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
File: Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json)
Hash identifier: 5cZkUN45KfZpAp2KaP8+bkQtXf+Qf6heFNcEeMaBeSk=
Subject key identifier: C5:4B:F1:72:02:71:C8:CC:86:FF:91:09:23:1A:23:FC:3D:FE:36:75
Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
Certificate issuer: /CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Certificate serial: 0198D515EFA5EB1E4F5AECB2A90FF9AC9812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
Manifest number: 1643
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: aLRYYiFOsGpUJH1BLkHFjgAjNVy8xMsNBNq4zL5yYgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ef:a5:eb:1e:4f:5a:ec:b2:a9:0f:f9:ac:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=c54bf1720271c8cc86ff9109231a23fc3dfe3675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:0b:ba:7e:ce:03:00:21:ce:5f:c7:11:41:
2c:f7:30:f9:3f:18:d7:2c:2a:be:63:61:9c:6f:a3:
8b:89:3f:4f:7c:28:61:bc:9c:1f:da:5f:ae:26:d6:
21:46:93:91:b9:8f:7d:cf:6a:d1:db:de:4b:52:a0:
4b:71:40:ca:93:6b:c3:02:56:0a:9b:3c:7e:e3:40:
e9:ab:5d:2b:3e:3a:d9:cb:59:9a:75:91:ac:29:cc:
1f:09:d3:f0:2d:13:30:97:78:86:07:15:4c:19:9b:
f5:e6:1f:43:c2:45:a5:0d:20:2f:cb:6d:27:64:72:
ab:d1:2a:a5:0d:52:05:46:f7:27:12:b7:8b:95:87:
71:3f:5c:81:e6:6a:5c:b3:6d:66:be:8f:d6:cd:12:
f2:c2:60:8f:e8:67:79:95:61:01:75:12:86:19:6a:
86:e4:7b:36:24:0f:75:99:11:e5:dc:b4:cc:ff:5e:
82:1d:bf:d4:b5:9f:a1:68:10:77:e1:4b:11:ac:05:
9e:e8:d1:08:58:f3:33:52:0c:a2:94:06:56:10:74:
43:b0:c6:02:6a:ae:e7:7b:18:95:2a:f3:cb:07:fb:
cc:7f:36:36:5d:36:7f:e0:e0:1d:1f:57:af:27:5b:
1f:58:ef:e4:06:eb:0d:62:71:ee:b3:c7:4e:6e:27:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:F1:72:02:71:C8:CC:86:FF:91:09:23:1A:23:FC:3D:FE:36:75
X509v3 Authority Key Identifier:
keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:ee:73:11:95:88:03:30:34:58:e4:39:46:5c:81:93:cb:
58:53:4e:04:ac:c6:86:d6:94:8c:84:26:3f:70:4e:27:f2:94:
e3:e7:9d:72:99:e9:f0:d6:3c:c9:e3:54:9d:d9:40:31:7d:d8:
0d:71:8e:c1:0a:2b:aa:e5:a2:c1:d6:9d:e8:c7:31:0c:71:58:
dd:00:0a:5d:1d:e0:d3:0a:b2:38:63:5a:4f:00:bb:8e:e8:2a:
9e:5a:8a:79:9b:8d:8c:8a:7b:ae:dd:b4:11:5e:fa:93:3e:76:
a6:0a:4b:cd:20:b5:fb:ca:f7:8a:21:3f:93:4c:c2:b4:2f:cc:
7c:42:67:e5:c3:92:c4:2b:ad:db:34:39:6a:1f:f1:0a:1d:1c:
8b:6d:ec:5e:28:ac:83:b0:4f:b5:6b:2b:44:47:e5:2b:a7:2a:
c3:6a:70:26:76:55:41:2c:08:b7:f6:8a:37:45:b8:c0:8c:b3:
67:52:47:a9:f4:2f:fe:c7:5f:4d:62:6d:c2:44:7b:5f:20:42:
f8:8a:16:bf:5b:ca:95:7e:d4:fb:9a:4a:70:1b:67:ce:60:75:
dd:14:39:2a:6b:2d:98:01:bc:d5:eb:4a:e6:2c:08:ec:3d:d9:
57:8e:22:2d:45:e2:ca:cf:47:5c:5d:56:cf:68:c7:37:50:17:
34:08:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:17 2025 by rpki-client