Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: tRO7xewXTlAwrwM2qGPkTT3/vlOyKVEjJcUTP3z+Zuc=
Subject key identifier: 92:99:56:78:E5:07:12:E1:E0:EB:86:2C:27:98:CB:6E:0B:EC:22:96
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 0198D4E0012006F8F267915DF4D2BB36B304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0CC2
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: eS6MQW8LJXbOfKPJgL7JPz63tfbPjd8ub5XElwYytXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:01:20:06:f8:f2:67:91:5d:f4:d2:bb:36:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=92995678e50712e1e0eb862c2798cb6e0bec2296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:f0:34:de:03:51:44:df:22:b6:5b:bc:60:
3f:ae:eb:ce:51:ca:63:cf:4d:cc:91:59:2f:79:28:
71:f0:e8:a7:0a:00:7c:18:4f:1c:5f:2d:19:2d:50:
c1:33:e8:92:1c:96:5f:26:0f:06:0c:07:9d:bd:74:
5a:9d:d8:76:0d:0a:22:e4:aa:d8:61:1e:4f:ca:38:
19:64:b2:f1:de:24:1c:04:f9:bb:e6:2f:2d:1f:ac:
17:05:52:50:58:12:79:a8:9d:3d:13:e3:27:cc:ba:
1c:f5:e9:c6:42:3b:ce:62:4f:25:39:7b:8a:85:1c:
44:63:f5:e8:4f:ef:a2:9f:13:f6:2d:e7:ac:24:cb:
3d:63:76:4d:59:64:17:d0:5c:a9:b0:29:77:6a:bf:
58:d8:60:9c:43:da:64:2d:be:1d:95:66:56:a3:e2:
0d:1e:2e:55:b7:7b:6f:14:d0:ce:e0:c5:0e:b8:e6:
c6:4f:f5:14:0c:ec:e9:01:d0:09:03:9e:0e:75:5e:
2a:1f:a8:16:1f:d9:03:45:e0:0b:8c:26:bc:6e:cd:
ba:8d:0c:75:17:a8:56:28:8f:f9:4d:00:08:3a:e7:
b6:13:cf:28:b1:62:b8:26:d2:1e:53:95:b2:ca:92:
4a:d8:04:06:5c:70:9c:f2:71:bb:b3:b3:10:ab:59:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:56:78:E5:07:12:E1:E0:EB:86:2C:27:98:CB:6E:0B:EC:22:96
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:51:38:d9:68:c5:37:52:81:18:83:14:b1:8c:3c:09:e6:
f6:5b:d8:74:62:d4:d5:04:77:e9:72:10:47:dd:62:18:42:a9:
6b:7e:a3:03:f8:06:c9:85:05:e0:e4:b3:db:c1:d8:6f:01:e6:
91:79:76:7b:0d:bb:49:7c:10:fe:04:0c:b6:d5:49:6e:0c:a0:
49:ac:d9:33:7a:7f:87:57:e5:54:17:72:f4:7e:a6:6d:2e:9e:
2c:68:e9:89:eb:79:6b:cb:26:27:3c:b1:1e:ca:8d:c1:92:a9:
c7:37:af:3e:15:82:ba:40:d6:34:3d:54:a6:10:fd:2b:78:52:
69:99:ab:e2:9c:8f:3d:c4:d3:6b:e0:f3:c3:67:f5:cb:58:95:
84:6b:00:d1:84:78:bd:3b:01:e1:e5:5a:8c:9b:f1:3e:7b:ae:
14:d9:e5:bf:4c:b3:a5:ff:89:10:1e:a9:b7:cd:9c:66:9c:77:
eb:af:02:a0:12:97:16:b3:c3:72:76:58:7e:57:44:c2:a8:c7:
a9:3a:6e:b4:d2:db:00:49:1f:89:53:15:b2:27:b2:22:30:4b:
a6:c8:78:d3:23:da:14:4d:1d:6e:60:c5:eb:af:29:9b:22:a9:
75:ed:f5:61:2f:c0:1e:1f:22:66:f2:e3:65:d3:43:b2:75:82:
2f:13:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:12 2025 by rpki-client