Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: q4HbqaDoMp/QWZEBsQ1846Ld1ifGyTstAgZtJy0aDlE=
Subject key identifier: B6:4E:07:18:E2:AC:61:F2:89:D2:BD:8C:50:9F:2A:CF:42:B9:56:9D
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 0198D6603F6B37F3DE356632044120A180EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 1137
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: r7baL4A9p5L263xby8O1D3ZEka1OvfFBR/MWJhlGOMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3f:6b:37:f3:de:35:66:32:04:41:20:a1:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=b64e0718e2ac61f289d2bd8c509f2acf42b9569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:0c:a2:d1:d0:89:00:53:86:2e:6a:a8:82:
13:01:fd:76:c9:fc:c9:ac:7f:1d:a2:33:df:e8:b7:
1f:b6:84:fb:80:9b:62:4d:71:95:b8:d0:77:e3:7b:
70:17:fb:4e:6b:62:82:61:4a:f1:d8:44:69:a4:07:
4c:b4:e8:3c:3f:ed:1d:6a:49:8f:4a:40:a7:8d:bb:
a4:63:03:ab:9a:dc:39:0c:d5:bf:54:ed:77:4a:1a:
a2:73:bc:ba:be:f7:0f:53:05:3c:84:ff:b8:af:86:
b6:e0:27:62:eb:b7:d6:6a:db:89:17:a8:eb:1b:28:
9a:4d:ae:a8:29:af:34:6e:9e:96:9b:e2:70:58:80:
28:4e:1d:3c:18:13:15:f5:a4:a1:8e:ef:69:3e:5a:
c9:b5:b0:ea:14:35:d3:c9:55:95:b8:9e:b9:19:bd:
06:68:6f:42:34:1d:b3:c7:4a:84:9b:a2:26:07:bf:
48:74:1b:02:42:3e:7c:0f:2c:0b:60:e2:e4:c5:5f:
7f:9b:8c:1f:dd:14:e8:77:8c:79:e4:3c:ef:c1:1f:
79:f5:0e:d4:04:51:28:22:ae:6b:cd:c6:2e:d8:72:
fd:db:cd:c0:41:4f:98:35:60:ad:2f:4a:66:c3:3a:
e2:70:8c:76:e0:67:ff:b4:96:07:f1:11:29:f3:06:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:07:18:E2:AC:61:F2:89:D2:BD:8C:50:9F:2A:CF:42:B9:56:9D
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:63:42:97:3a:58:8a:d5:c5:80:1e:dd:af:87:67:74:48:
07:a5:cd:08:bd:0b:e7:cf:a7:38:8a:99:4f:c5:ff:c4:5b:0f:
fd:d9:00:13:01:d2:4d:32:ff:4e:5b:07:26:04:ff:07:59:0a:
e9:d6:45:c2:ba:5f:b0:e5:f4:8a:1d:86:21:0d:3c:96:63:f3:
2b:15:94:f0:af:fa:33:6a:42:e1:30:f2:9d:38:25:91:f6:e8:
d8:fd:a6:5b:f8:04:59:24:98:1e:30:bc:02:8b:43:b1:eb:38:
3b:7c:86:e6:ac:59:d6:c5:95:4a:ce:00:fc:1c:d3:b5:ee:13:
d6:50:5d:65:d1:79:77:80:87:54:7e:ce:df:4c:ff:82:60:54:
49:4e:48:f4:f7:22:41:b2:71:76:dc:08:b2:d4:70:66:14:8d:
a9:f7:af:2d:b7:7f:96:05:e9:51:b1:ac:69:87:26:ef:7c:b4:
b2:11:b2:83:bf:23:a2:74:80:61:df:89:75:ac:64:9f:06:2a:
da:65:6e:20:c3:a3:28:c0:26:90:e7:2b:08:f8:2f:6e:69:b8:
27:d6:f7:c5:e6:16:f5:f6:23:04:7a:d6:95:56:ac:6b:c1:ee:
3b:d0:18:cf:88:3f:6a:63:0d:cb:f7:98:c0:13:7b:b3:b1:42:
06:5d:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:58 2025 by rpki-client