Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File: OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier: Zz9UNjxpgZt4P4UeVsoEjZaZGFMpAbv3BSOymncPleg=
Subject key identifier: 20:57:D0:FE:73:A6:61:84:F2:F2:65:AA:CA:63:19:6F:C3:E5:A6:81
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer: /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial: 0199FFC71D78D8E1ACB705A5CCCF23E9D4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number: 0637
Signing time: Mon 20 Oct 2025 04:01:03 +0000
Manifest this update: Mon 20 Oct 2025 04:01:03 +0000
Manifest next update: Tue 21 Oct 2025 04:01:03 +0000
Files and hashes: 1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: /8t90ajIF8pyDRZp2wziS0gbLwJucpgMqbWiX33pSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:1d:78:d8:e1:ac:b7:05:a5:cc:cf:23:e9:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Validity
Not Before: Oct 20 04:01:03 2025 GMT
Not After : Oct 21 04:01:03 2025 GMT
Subject: CN=2057d0fe73a66184f2f265aaca63196fc3e5a681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:2c:01:11:d1:ee:ad:89:f4:a5:58:71:85:
2b:66:db:44:d8:93:0d:8a:aa:88:b3:da:72:46:fb:
62:a1:3e:f1:a1:9f:e7:49:8d:02:c0:2c:82:0e:20:
60:2a:fb:9e:7d:dd:75:15:90:e3:97:2e:40:23:f7:
37:c6:a5:b5:f5:31:79:14:e3:f0:0f:6a:e6:e5:25:
50:9c:d5:13:ab:93:75:5c:43:64:15:fa:e0:44:63:
66:02:46:22:62:46:5c:bf:e0:de:96:a6:7a:d8:f5:
49:18:b9:53:10:00:93:f9:db:c8:c3:81:7f:39:a0:
50:4a:c3:14:89:c2:8d:1d:42:13:da:4d:5c:a2:1b:
f1:73:b4:4d:af:08:66:1a:77:e5:17:57:77:fc:30:
1a:3b:3c:a5:79:3b:db:a0:1d:73:4c:79:91:aa:c7:
4e:70:88:6a:e8:9d:30:bd:f0:06:59:87:48:6e:6b:
1e:2b:2c:bd:18:5f:20:2d:59:76:98:8a:ee:d8:f2:
43:fd:1b:bc:37:f3:ef:00:b7:46:b6:18:72:8e:a1:
de:05:1f:81:9a:e9:d5:2c:07:a4:46:9d:dc:9f:4c:
62:5b:c0:35:02:47:be:e8:96:33:fe:ee:db:9e:b4:
18:b2:46:93:dc:0f:1c:8f:37:a5:da:5d:5e:cd:24:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:D0:FE:73:A6:61:84:F2:F2:65:AA:CA:63:19:6F:C3:E5:A6:81
X509v3 Authority Key Identifier:
keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:9c:50:94:d4:b6:8c:65:cd:7c:69:65:da:c0:df:2e:f0:
cb:9f:24:e8:97:91:7c:c4:d4:40:f0:4e:2f:74:0b:8b:05:6a:
7b:c6:11:cc:f3:3c:7f:e4:7d:f7:e8:65:0d:71:83:15:0b:97:
eb:30:fd:2c:87:25:ad:f5:f3:68:01:2a:bb:6e:b6:1a:0d:ed:
83:ee:66:0b:53:80:68:ab:b9:0b:b6:ae:3b:f6:a6:91:6d:49:
d2:b5:51:68:4d:0c:7a:6c:9c:30:41:01:4b:67:fe:5b:5e:f7:
cd:c5:8c:1b:57:67:e2:4d:b2:19:e7:32:f2:5c:dd:fc:0c:27:
d7:92:20:18:9a:fd:73:eb:d5:92:db:54:fe:5b:49:3d:28:9f:
6b:f7:81:ee:2e:10:6a:38:d4:f2:87:6c:6f:13:6a:a9:49:0a:
e3:f3:7d:09:90:18:6d:ba:75:cb:7d:28:73:99:56:85:d1:33:
9f:10:4c:d7:f1:05:00:aa:b5:16:bb:7f:aa:11:10:1f:8b:d0:
8f:d0:17:bb:f5:a5:bf:ae:25:c1:d7:78:aa:9e:f0:6d:b7:fb:
c2:48:c7:12:3b:f3:af:e7:c4:a4:66:41:ee:26:c6:3a:6e:ba:
39:12:e1:91:e7:4a:2b:d3:75:cf:a6:a8:f3:22:f8:a8:6a:97:
4e:91:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:34 2025 by rpki-client