Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: T5KjG/u6v8m8TOBJ85YeguLE2UsRzP/h1uxk9RTN2bk=
Subject key identifier: A1:08:04:A1:5B:1E:84:AF:88:38:99:91:F2:CC:4C:63:00:56:86:B7
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 0198D6600EC2946801B9901B74B0B46E5836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 1075
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: PYGrGUTBRMEwNg2gBvxYv59mpt75BC2I8pDgqpMovEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0e:c2:94:68:01:b9:90:1b:74:b0:b4:6e:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=a10804a15b1e84af88389991f2cc4c63005686b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:1c:71:b2:96:82:49:6d:65:34:b0:d4:d1:
5d:89:6e:38:48:7a:12:7d:e1:9e:10:61:92:7d:f5:
f8:1c:33:07:84:f6:b6:65:41:44:36:c5:5a:23:05:
a5:ab:39:80:75:67:69:ad:4b:7d:75:1f:a9:a6:94:
5d:e8:2a:36:ac:04:9a:e6:7c:15:63:2d:ae:83:19:
8c:67:53:ca:62:52:72:5d:e2:9b:4c:50:3e:64:b9:
11:36:4d:eb:97:77:50:b7:be:fa:43:40:d5:55:82:
c9:db:bf:71:68:8c:de:6c:5d:e4:b9:40:73:c6:79:
e0:13:a3:1c:f9:74:a5:85:99:7b:9e:7e:ed:2c:df:
23:a7:09:2e:28:50:1d:28:66:c6:35:bd:43:60:8b:
1c:49:37:0f:3d:ca:73:47:7a:42:ae:49:50:29:be:
ce:68:e1:81:78:73:c4:30:30:a4:a0:a1:ea:4c:6a:
d2:9e:e2:9e:37:e5:c1:50:ca:f3:89:3b:9e:5b:cf:
a1:af:4b:44:06:fe:ca:ac:e7:db:1d:3b:5e:fd:6c:
48:61:20:df:bc:59:8e:09:dd:6b:30:57:c0:52:3c:
9c:12:ee:2c:4e:1b:88:3b:56:86:6f:f7:a3:73:18:
a7:ac:a6:8b:45:11:e0:c9:32:60:c8:4b:c3:3d:61:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:04:A1:5B:1E:84:AF:88:38:99:91:F2:CC:4C:63:00:56:86:B7
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6a:bc:e9:a2:b2:4e:9c:23:a2:48:8b:a3:9d:f8:5b:d3:34:
d5:06:86:28:f1:3a:29:b4:a8:e1:e7:7e:62:2e:a8:68:e3:22:
4c:29:7f:8c:e4:6a:7a:40:26:bc:29:a9:e6:1d:64:12:06:81:
b8:7b:f1:d5:89:4b:b7:f8:e1:6f:e6:99:90:18:10:94:76:8a:
c5:be:26:9b:3e:8b:20:18:74:aa:37:a0:50:bf:a5:bd:8e:ce:
d7:01:58:17:b1:4b:2c:53:88:4b:03:1b:a0:fd:bc:05:ed:e9:
ce:a9:23:9e:da:66:a2:30:a3:97:53:28:04:71:75:b7:ea:8a:
df:8c:fa:ad:7f:a9:7e:0e:a1:b5:c9:8f:c9:67:cf:78:9b:74:
41:f4:90:25:5d:01:b3:af:3c:c0:f6:91:d9:cb:61:48:67:0f:
c4:ac:b6:a2:61:75:ae:b2:4f:fc:b6:df:00:13:58:95:47:8c:
43:2b:39:0a:f7:92:5e:00:02:51:8e:72:c9:9b:82:5b:06:59:
e4:57:5c:b8:91:09:4a:a1:18:69:d7:ed:8e:ff:f7:af:82:1a:
06:50:3f:46:03:9f:4c:e6:a8:39:81:05:df:a1:cf:d1:5b:8f:
73:c5:6b:ac:a0:4c:8f:1f:5b:1d:20:e0:0a:a3:37:8e:61:00:
ba:77:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:12 2025 by rpki-client