Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: NxNihojLkHBZ9zMMI0zZ1QJperyxeeh71lXy6wkRFTA=
Subject key identifier: BA:71:30:A3:E8:36:1E:02:FD:AC:D7:5A:EF:A3:51:0E:6C:91:63:30
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 0199FBEC3700A20FC7BC9C3984252EE3909F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 0B1D
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: 1LCcRn/W66G0+RVAFciReTav6SZFl3OR6KJG/2M4vfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:37:00:a2:0f:c7:bc:9c:39:84:25:2e:e3:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=ba7130a3e8361e02fdacd75aefa3510e6c916330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:c5:3a:c5:00:e4:1f:76:5f:7b:24:bf:b9:
df:9f:8b:19:16:5d:8e:b8:c6:4d:92:09:95:b0:53:
ad:3a:ea:a5:a1:c0:2e:f8:32:0a:97:71:c7:0a:e1:
83:45:bc:38:59:09:43:ca:5e:8f:5a:a6:3c:cb:24:
5f:f3:50:3b:7d:1d:c7:9e:89:46:d5:30:b9:03:eb:
72:cb:b1:6b:49:11:e3:32:5a:13:23:70:77:5f:35:
22:ee:a4:d8:05:8e:3d:36:dc:a9:76:32:78:d0:d1:
4f:e0:cc:aa:da:21:f0:14:e8:7c:39:4a:bc:88:7f:
c5:68:ad:44:7d:ea:5f:b5:8a:e4:6e:0d:fa:a7:7a:
2c:a5:bc:32:44:fd:2c:ea:e1:b5:60:60:aa:76:2a:
b0:8f:16:4c:ed:e1:a9:bd:f0:74:b0:98:63:d4:7a:
3e:fb:6f:50:ac:15:63:63:8b:b1:48:d0:da:ff:32:
19:70:49:8d:9e:6c:34:5b:dc:28:6d:55:0d:f7:2a:
37:1f:d8:1c:3f:c3:81:00:73:a9:9e:49:5c:65:1e:
6d:86:b6:52:fa:cf:3b:ba:86:76:95:5f:03:9b:49:
42:e0:57:81:60:eb:e8:07:df:28:ee:5e:7a:d8:08:
a7:5a:f3:c7:e1:e2:c4:22:b5:79:f6:88:2e:4f:18:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:30:A3:E8:36:1E:02:FD:AC:D7:5A:EF:A3:51:0E:6C:91:63:30
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2b:63:ce:bf:b9:bf:6a:5a:3d:93:0e:14:67:fc:c7:d9:40:
00:ef:0b:b4:ed:77:d3:34:59:c3:5e:0b:78:40:b0:63:bc:97:
38:e6:91:e7:bd:43:3b:f8:7a:fb:01:a6:1f:d3:86:b4:1f:f9:
bd:b7:2b:70:5e:b0:1d:ed:9e:da:61:4f:20:bf:a6:c1:10:fc:
dc:6b:b7:e4:0c:0e:a3:09:50:6f:c6:bf:88:77:9c:8d:0a:93:
b0:2b:7e:db:8b:66:af:33:a2:f3:e4:12:ae:d9:e2:fb:63:8e:
38:5b:45:55:e7:c7:74:e1:ee:01:10:aa:5e:0a:d8:9b:ac:97:
d2:34:36:db:a2:4b:22:36:81:c8:3f:e7:30:aa:b7:28:7b:10:
0a:0e:b8:c9:e7:0c:b9:0b:ea:66:f2:18:17:02:15:2c:e7:8d:
39:01:d1:8b:93:21:2b:67:01:7c:7e:e2:ae:35:7d:0f:bb:40:
cc:10:81:a5:ae:6a:d9:d0:ce:e6:be:8e:e9:d9:73:59:bf:44:
f1:4e:33:49:2b:e4:54:9f:b9:3f:d0:ca:60:31:21:c9:07:64:
85:5e:f5:05:2f:02:e5:50:65:0c:f7:fc:72:fc:bd:37:ab:b6:
3a:22:e0:f6:90:62:f8:10:62:c3:83:1f:65:ae:6e:95:19:e8:
a7:b1:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client