Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: T7ur653sgTX0eMo3sT8+XFZWJc5lyQR11IS6/jkeH5Q=
Subject key identifier: F4:5D:29:02:D9:D9:7A:29:59:84:CC:06:79:4A:F7:7F:90:FC:E5:02
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 0198D4E0B257CE05EC2897566E38A924F34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0855
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: tKKXPgiqTG5SCM5GIJUcK1ZS8brypVkFy3idwNblP+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b2:57:ce:05:ec:28:97:56:6e:38:a9:24:f3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=f45d2902d9d97a295984cc06794af77f90fce502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:db:0b:77:6f:6f:0f:47:9a:42:74:d7:41:
07:c6:1c:91:70:cf:29:6b:80:c5:31:3d:93:5a:f8:
03:1f:55:8a:df:3c:f4:92:2a:56:55:ce:21:a9:56:
f0:a8:79:00:f1:99:b9:00:87:d9:65:e8:90:0f:1a:
a1:b6:e9:f3:54:e3:45:34:ab:21:5d:cf:48:21:d4:
5f:94:7b:ed:fb:3f:6e:98:f5:29:50:93:2c:b1:a7:
53:8c:7e:89:49:33:ed:79:ee:67:1a:79:c4:24:71:
35:ef:1c:a5:df:2a:b2:36:7a:70:d6:de:24:7f:3d:
bf:44:bd:c7:65:2a:27:fa:8e:36:cc:8f:8a:98:d3:
db:cb:17:cb:02:db:e7:c1:74:ae:8a:0c:d0:26:b6:
e8:38:9a:dd:ea:b0:b9:4c:d6:63:8b:1d:dd:99:45:
d6:95:e4:a7:40:d1:93:7b:24:9f:72:42:e5:c2:34:
41:aa:a1:10:d6:74:26:db:52:c3:bb:6f:4e:85:10:
e8:b8:06:c1:57:21:ac:fd:24:bb:78:20:36:74:1f:
ff:18:99:99:12:e9:3a:e3:b8:06:8a:4a:0e:38:97:
d3:a8:20:16:59:2b:df:3f:7f:79:6b:06:55:03:fa:
44:cd:37:d3:09:67:b2:56:dd:2b:4f:0b:df:b7:2d:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:29:02:D9:D9:7A:29:59:84:CC:06:79:4A:F7:7F:90:FC:E5:02
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ef:f3:98:c1:b0:da:1b:09:f1:d0:3d:51:b0:53:b3:a7:a5:
52:6e:7c:fd:4e:20:8c:36:e0:95:12:26:80:da:37:22:ce:79:
eb:69:11:3f:e1:0e:38:8c:f7:d8:85:2b:63:df:c4:96:3a:59:
aa:2b:02:b8:55:40:13:52:49:05:90:03:d8:e9:dc:80:e2:18:
32:ab:ac:17:77:03:cc:8f:bf:0e:5e:6c:17:8f:a6:81:a8:a2:
1b:73:fd:33:c7:da:87:ec:5f:bf:01:6e:de:07:77:ef:62:cb:
25:c5:6d:df:3d:18:3a:2c:d5:5e:1e:2e:40:95:0a:97:22:e6:
c8:2d:7c:6d:09:b1:cb:40:2e:45:b0:05:69:3d:be:55:43:0b:
9b:e3:46:fd:e0:98:6d:4d:1c:34:2a:6b:1e:f8:b5:66:92:49:
71:55:42:6b:dc:57:8d:13:cd:49:bf:3e:46:d7:79:39:cb:ab:
1a:e8:af:b5:1f:35:73:63:b4:33:ff:fe:29:15:63:4f:ef:fe:
1a:b2:ad:28:58:d1:73:f5:99:35:9e:5c:97:89:e3:51:3f:78:
08:b7:64:b8:b1:1a:64:ec:94:63:fd:2f:c0:56:43:69:3f:13:
7c:89:18:2e:e9:6b:28:12:8c:7f:8a:e3:16:3d:72:f8:f9:e7:
fc:fc:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:56 2025 by rpki-client