Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: ArbLYYqHqPgh2FffQ9A731d9DseTQtR/tnoR7eLlPp8=
Subject key identifier: A0:E9:93:CE:CE:94:E5:71:3F:70:FD:C3:16:DB:28:3D:14:DD:5E:DE
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 0198D6612DF306A87A18B0E5B1DD141009E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: tEtzeIoZuhzFG2232jQlSjjeEqmAd+DXzjwSaR1RTBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2d:f3:06:a8:7a:18:b0:e5:b1:dd:14:10:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=a0e993cece94e5713f70fdc316db283d14dd5ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:fc:43:8d:34:9a:f6:dc:38:2b:d1:67:49:
46:2f:f8:c6:fb:d0:88:d6:74:7f:f9:28:fb:9a:e1:
7d:63:b9:2b:80:70:98:9a:9f:90:68:90:ad:36:4f:
b3:78:8e:e5:63:c5:01:23:0c:76:c5:55:4e:a3:7c:
87:cb:78:6e:64:a6:5a:8e:0c:8a:0a:e3:7c:bd:00:
99:b6:a1:6b:66:c3:8a:af:81:10:0e:46:35:36:17:
4c:31:b6:98:f5:29:ec:cf:15:70:21:19:d6:cb:e5:
4d:ef:9a:19:1a:88:07:a5:a9:d0:a8:ed:a7:18:6c:
a3:6f:53:e6:70:7d:f3:63:9c:f9:8d:d7:ad:66:1f:
35:86:9f:9a:c1:3e:ff:d1:c0:4f:2d:34:f1:b3:75:
fa:fe:c7:2f:d4:30:66:f8:db:fe:07:c6:4c:9a:02:
0a:94:9a:a5:f2:9f:d0:b9:bc:d6:92:9e:03:33:8c:
ba:51:16:b9:c4:e3:ef:2c:58:8d:b9:9a:b9:b9:7c:
3e:18:1c:88:75:4d:03:1a:59:b0:c2:2d:d2:97:0d:
47:87:4e:0b:e0:ea:4d:2d:a4:ce:e0:ee:dd:ca:31:
a5:0f:bb:44:ce:3a:0a:9c:30:11:4b:f0:e1:e3:6c:
32:dc:1f:3f:8c:5e:af:44:69:2e:a3:e4:c8:2a:d7:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E9:93:CE:CE:94:E5:71:3F:70:FD:C3:16:DB:28:3D:14:DD:5E:DE
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ff:32:a2:14:fa:29:f3:a0:2b:3c:13:41:a3:d7:f9:3d:1d:
2c:f9:c2:d9:1b:01:49:e2:d7:49:d2:3e:42:1e:1c:f1:1a:93:
42:94:6d:bd:29:7a:87:e2:59:6e:d2:0d:d2:cc:03:4c:fd:61:
6d:b6:22:13:d8:cc:ee:36:2c:1e:81:89:0b:8a:40:b8:ff:cf:
d5:63:25:c0:55:30:32:81:ee:a5:ee:26:5a:b8:f4:5c:94:d5:
30:f5:17:0c:78:5a:54:7c:a6:d5:e5:aa:bd:82:0d:89:e3:62:
0a:6d:9f:ab:4e:ec:27:70:1d:51:f9:b1:7a:94:0e:9f:d3:38:
5a:75:01:c1:0a:ec:84:55:88:ed:07:26:97:67:b4:76:fa:4d:
e7:91:f9:0f:35:23:ce:b4:5c:a2:40:7c:40:09:d8:4b:6b:49:
ac:98:0b:d6:80:08:11:a5:e8:f3:64:42:8e:ad:dd:d3:f1:c2:
79:9f:5a:85:8d:29:d7:9d:7a:fa:89:15:f6:92:9f:aa:f0:89:
3d:e7:12:33:bd:70:19:f7:57:61:9a:e8:d8:4a:10:96:2c:0e:
48:91:dd:79:fc:2b:ff:6e:14:4b:9a:b4:be:35:6f:43:91:d9:
67:2d:fe:74:2a:25:c8:8f:63:7d:0b:5b:13:82:cb:05:69:8a:
ad:97:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:26 2025 by rpki-client