Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json)
Hash identifier: XFeLtBMNnTWb2ym4c+moScyVOP6DRHscbceVxWoY1b8=
Subject key identifier: 4C:69:0E:9A:C1:D1:50:F0:BC:84:76:62:97:83:7B:47:88:19:84:EC
Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Certificate serial: 0198D8BDE1B2F26A2BAA99B1E2085EBB0D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 21:02:59 +0000
Manifest this update: Sat 23 Aug 2025 21:02:59 +0000
Manifest next update: Sun 24 Aug 2025 21:02:59 +0000
Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: YJbAdKnhsiee8IHTxce1jFJOmR16oDM0/5dbTNJrBbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:e1:b2:f2:6a:2b:aa:99:b1:e2:08:5e:bb:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Validity
Not Before: Aug 23 21:02:59 2025 GMT
Not After : Aug 24 21:02:59 2025 GMT
Subject: CN=4c690e9ac1d150f0bc84766297837b47881984ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:c3:35:86:b5:27:93:0a:ac:5b:23:e9:bb:
56:89:06:3b:cc:d5:34:33:e1:25:91:9c:3b:8f:6e:
70:38:1d:04:d6:3a:a0:22:30:f0:fd:a9:0d:e9:a5:
68:df:10:ed:c0:ce:78:6b:51:29:a7:62:e2:1c:93:
a0:1d:f0:41:1b:7f:02:80:d8:35:bf:2b:90:1c:01:
0f:51:1f:1d:dc:86:0e:39:6b:ae:32:7b:c3:ba:5a:
84:a8:a6:03:50:1e:fc:4e:fe:e9:e4:1c:23:bb:98:
c6:58:fc:25:82:3d:97:fd:ca:71:a0:58:af:1e:a3:
c9:a1:5d:94:ff:c7:03:87:5f:0a:dd:e2:6c:3d:7b:
0b:52:f1:ac:a9:27:68:e0:98:e4:89:76:45:54:43:
d8:8e:fb:29:1e:51:ae:b5:78:31:38:7b:61:68:8a:
7d:32:64:88:ea:74:6e:3b:a5:d8:d5:6c:c4:c9:e9:
20:58:61:70:a5:d4:58:1a:8b:94:d1:67:08:11:3b:
9c:bd:38:ba:a6:08:ee:3a:3c:b2:f7:5c:eb:73:a7:
d7:d1:ff:f9:2d:ce:e2:15:17:f0:14:07:7a:c9:39:
74:65:a8:aa:7c:53:42:3a:52:af:9d:d5:d1:29:38:
2d:b1:3e:af:3c:1c:7a:13:03:6a:57:81:aa:53:84:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:69:0E:9A:C1:D1:50:F0:BC:84:76:62:97:83:7B:47:88:19:84:EC
X509v3 Authority Key Identifier:
keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dd:b2:38:50:29:d9:bc:5c:b8:84:3b:a6:bb:f1:ea:5b:9d:
9d:b3:f6:2f:c9:97:1f:6a:93:52:2c:82:a1:fd:0e:cc:88:eb:
47:25:44:da:a9:b5:9a:44:88:08:33:fe:0c:d5:0d:a6:95:15:
0b:5a:05:b0:90:cb:85:f3:fc:52:d0:32:93:35:87:15:cf:ff:
7c:f5:52:c3:4f:2b:5c:48:d7:e3:74:60:43:11:f5:c1:94:ec:
b7:ab:65:68:a1:69:8a:39:46:06:f7:eb:26:fa:3e:81:bf:79:
32:72:13:98:16:71:e2:72:5b:56:33:b5:f4:90:02:cc:ec:1d:
1e:cf:ac:ab:2f:6f:5d:9a:2d:98:6f:95:ea:26:2e:5f:53:2b:
e3:ca:d6:dc:b7:64:0e:6f:94:70:ac:44:87:6e:23:38:bc:f2:
06:4f:a9:74:ce:15:a0:43:6d:b7:1a:03:76:ab:3b:ad:30:11:
d4:1e:05:9a:da:1e:a3:cd:7b:80:64:db:5a:0a:04:fb:6f:fd:
8d:ae:f0:75:a5:51:be:0d:44:d6:2d:7f:2d:66:0e:57:a5:95:
eb:de:63:b7:22:4a:4d:7a:fc:79:ec:c5:66:20:8a:8e:a2:54:
19:c2:79:b0:d8:a2:1c:d8:de:a9:a8:54:77:57:73:0d:1c:bf:
72:6c:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:13 2025 by rpki-client