Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: QXLBsjJT75UpUCrgod3tgQhagbtsEa3ci9/H9opeEzc=
Subject key identifier: E1:C2:F4:29:A0:52:8D:8B:A4:D7:DD:3E:28:8C:A9:57:5B:4A:45:10
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 0198D65F937E39F63130E2F97BD7354A78E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 0A85
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: HrKKFIb3bUX/gvnw8lYMnXsl+QmovPQAqmIz4Tr7mco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:93:7e:39:f6:31:30:e2:f9:7b:d7:35:4a:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=e1c2f429a0528d8ba4d7dd3e288ca9575b4a4510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:9a:cc:53:04:91:d0:2b:a4:af:1a:97:96:
d9:01:e0:75:88:5f:27:f1:bd:7b:9d:34:92:de:2d:
4e:ce:0c:53:42:76:d2:6c:ee:be:8e:86:df:9f:15:
30:ae:92:c9:11:4e:cc:95:a1:5e:66:da:63:df:5d:
cd:88:42:61:e3:95:6b:34:27:29:45:ed:6e:6c:fc:
e6:2f:48:e6:86:83:1b:d5:ec:be:7c:2d:68:11:1e:
d3:e4:5b:d1:f8:08:1d:42:12:64:90:f5:8f:98:ef:
45:e0:c6:9f:e9:2d:aa:6e:aa:8d:76:59:d1:f3:f4:
97:a1:a4:db:a1:56:d1:f9:32:b4:7b:6a:49:1e:17:
bf:6e:ba:16:80:10:f2:39:66:e0:de:0f:55:31:6e:
52:f0:be:0f:13:dd:a8:74:69:53:88:e7:4c:6d:e4:
46:2a:25:bb:9e:6b:85:8f:8c:4a:c3:ff:cd:4e:d1:
12:48:09:95:e7:41:ad:3e:97:16:a8:c2:70:df:d4:
58:01:e1:79:d3:b7:6c:42:70:c0:da:d9:9c:64:06:
c0:72:63:4a:c1:d7:70:e2:f9:54:fe:ea:05:69:b8:
1f:f3:ae:18:f8:35:1a:65:5a:f6:3b:32:07:7a:f4:
70:ab:8b:4d:2f:92:b7:7b:26:5a:f9:09:d8:33:2d:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:F4:29:A0:52:8D:8B:A4:D7:DD:3E:28:8C:A9:57:5B:4A:45:10
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:8f:59:64:ac:7a:20:7e:28:47:7b:8c:e1:2d:1c:c1:38:
f6:3f:6b:f8:9c:87:38:f3:ab:7d:3a:32:90:b7:3e:b4:c0:6b:
87:a8:ae:5d:4a:61:64:a4:f4:f5:41:bf:7c:f3:06:28:c8:f5:
74:ad:d1:34:be:bc:e3:c5:4d:6a:25:1c:53:e9:d5:a7:3f:7d:
72:cc:bf:45:a4:28:9c:50:eb:fa:7c:36:8a:c7:15:4b:b4:d9:
c4:57:f9:df:25:14:70:39:d2:9c:b0:0c:6a:cd:af:ef:d1:1d:
bc:52:e0:5d:c2:69:05:88:e5:e4:e9:7b:68:13:2c:0a:04:50:
b0:a2:7b:16:51:f0:ac:30:98:0e:e3:a2:d8:04:18:0c:8a:69:
8f:94:bd:84:14:96:e1:3d:45:52:4c:17:90:d4:b8:cf:3b:77:
61:16:70:8f:cb:28:a2:47:04:4f:df:26:6a:d7:82:56:f8:57:
45:5a:8e:28:81:31:eb:93:37:e0:f4:1b:98:a4:9a:5f:c8:d3:
dc:5a:90:ca:a8:c0:16:7c:b8:0f:1b:a4:5f:e3:ba:67:2d:f1:
62:fa:06:16:58:f8:9d:d4:28:b2:fe:41:0f:e9:39:eb:2c:af:
52:76:fa:54:e0:3b:48:34:e1:e1:c3:22:a2:a9:c9:c0:eb:94:
2b:03:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:02 2025 by rpki-client