Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: 0kVhytKqpn/bVSsPfNf16Z6E3f1r7hrNu08wFARQso8=
Subject key identifier: 1C:13:11:09:26:25:88:12:61:29:94:C2:1F:D3:64:1E:5D:7D:4B:2D
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0198D47264F873A67D0D14D2EF73548EBE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 11C7
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: jIjkOSPiy5MNnKWMwaaAVrSMZUuMCcyQ8MvJNrLLznw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:64:f8:73:a6:7d:0d:14:d2:ef:73:54:8e:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=1c13110926258812612994c21fd3641e5d7d4b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:f2:ca:56:20:6f:38:fd:ba:50:e3:01:ce:
9e:b4:33:75:2d:9b:dd:65:80:9d:0f:cf:8d:68:e7:
29:ae:88:4b:4e:1d:88:de:54:f7:85:83:7a:97:14:
0a:af:02:c4:74:99:72:c8:08:9c:89:7f:76:da:c8:
99:df:ed:00:20:bc:ec:a6:c6:73:41:21:4e:d1:f4:
9c:39:d2:fa:6b:f0:7b:3e:b5:69:a0:14:78:6f:ac:
f3:c7:69:a7:5f:ec:27:e5:0e:27:05:b9:45:d4:92:
d3:f9:fc:03:cc:b0:d7:b0:78:8c:34:08:b8:66:47:
00:ff:c0:0e:ff:2b:83:8e:a1:8f:a6:a7:1e:be:14:
8b:5e:53:36:ed:52:cb:7d:0d:8e:a5:f3:b0:9a:7e:
51:34:78:aa:ec:49:46:8f:c6:69:d6:7c:28:d1:0b:
79:00:e9:b2:d1:ec:ab:32:ff:aa:95:60:af:f7:58:
a3:11:fe:21:24:af:e6:a5:50:cc:7e:6a:d6:39:22:
83:22:7e:3d:9c:b7:6a:72:a1:86:bd:a5:31:c0:34:
0c:49:7d:2a:87:2a:15:e1:dc:9f:2d:48:8d:08:ce:
0d:33:32:f8:18:57:61:f4:15:29:e7:74:92:af:c3:
27:0f:64:96:99:11:ef:f3:8c:2e:94:da:0d:d2:8c:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:11:09:26:25:88:12:61:29:94:C2:1F:D3:64:1E:5D:7D:4B:2D
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dc:ee:c0:02:99:27:60:b9:47:65:30:17:61:a0:d1:d1:0a:
fe:a3:9f:7c:12:24:ae:2f:ed:bc:a1:0c:e5:f5:c9:cc:d6:42:
ea:74:fd:92:28:fc:1e:18:33:e6:19:bb:a4:93:1d:aa:18:36:
f4:61:d1:0b:50:49:be:ff:46:ba:78:98:6b:0a:49:59:60:37:
76:28:c2:90:bb:76:16:47:3e:04:32:84:14:b6:92:52:53:a2:
b4:52:b0:51:ce:fb:0e:28:57:98:7e:62:b6:8d:4b:3c:1a:7a:
f5:6f:57:b4:25:3a:1a:2d:2f:e2:00:35:8a:0c:5f:da:42:c4:
c9:30:40:19:59:37:c3:35:61:49:b8:31:00:1d:a1:13:cd:7b:
e7:c7:87:c5:e9:a0:5a:24:cd:ba:34:2f:46:37:dd:23:7e:96:
77:8b:11:52:f1:82:1e:93:56:3e:de:48:34:d9:ec:02:2f:9c:
40:6a:e6:29:b7:42:f4:d3:3c:09:af:1e:55:69:62:5d:ed:38:
a6:c8:d8:be:ba:0b:ed:3d:ca:91:d7:fc:be:83:31:d6:26:7a:
3e:82:4e:81:ac:06:a3:28:1b:60:9a:ce:ac:07:e6:97:28:f6:
5f:07:90:5d:7f:41:fa:19:b8:27:3d:53:d7:f1:f1:9c:3c:24:
d0:fd:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:02 2025 by rpki-client