Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: gj0ZRY6lh7onXGOeaRWK6U3bs3SQyeWxQht4FQC7kGo=
Subject key identifier: 2D:05:83:A0:E1:82:57:06:6B:18:A3:A1:99:62:28:E4:89:BB:7A:F9
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 019A0592EA74F08DE919B8DEE485AC016333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 11D4
Signing time: Tue 21 Oct 2025 07:01:45 +0000
Manifest this update: Tue 21 Oct 2025 07:01:45 +0000
Manifest next update: Wed 22 Oct 2025 07:01:45 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: EFm6avBjnyRR+xG2wukEvIA5a9SV5phegnwZHeAQvpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:ea:74:f0:8d:e9:19:b8:de:e4:85:ac:01:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Oct 21 07:01:45 2025 GMT
Not After : Oct 22 07:01:45 2025 GMT
Subject: CN=2d0583a0e18257066b18a3a1996228e489bb7af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:7b:54:da:49:37:eb:2b:30:4e:8e:b2:8a:
d7:cb:53:49:b6:3e:c6:b1:f9:ed:e3:2b:00:8b:ca:
f6:5b:dc:b4:b1:fc:03:02:e8:ad:a1:a8:3a:79:09:
be:65:61:3c:f0:6c:e9:90:ec:1a:bb:63:fa:bd:f0:
b6:d0:db:61:af:5f:fc:d5:a3:89:2c:4e:f0:17:87:
b3:0e:f4:84:77:d1:d1:24:70:e1:37:22:3d:53:f6:
e0:6b:a1:e9:1f:79:42:75:d9:f4:6e:d0:e8:f0:70:
6f:22:50:b7:91:92:c1:e0:d7:4c:2a:a0:c5:ba:fa:
46:e5:a9:80:32:04:8e:f3:d9:3e:bb:da:60:ed:6d:
93:9e:eb:a0:cb:73:e2:57:3e:95:7f:16:75:d2:a3:
24:9e:aa:c2:ae:46:74:15:c7:ea:84:31:90:2b:36:
47:f7:26:e2:3a:ca:05:0f:11:cf:b5:7d:36:fb:b1:
a9:9f:67:35:60:72:2a:c2:4c:ef:29:1d:6c:16:78:
dc:cd:be:29:e7:0f:12:6b:0e:f8:da:78:2d:15:6a:
14:cc:59:7b:06:1c:f0:89:d2:25:cf:85:8a:54:2c:
7e:17:94:6f:07:d5:05:3e:00:57:e7:d5:4e:9f:6d:
0c:0e:b8:9f:93:30:bc:29:08:c6:ef:f0:54:d3:de:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:83:A0:E1:82:57:06:6B:18:A3:A1:99:62:28:E4:89:BB:7A:F9
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:90:08:a9:3a:f2:cb:77:ad:0e:2d:31:32:55:d2:bc:62:
67:a6:a3:24:c9:80:5e:2b:83:48:65:0e:79:ab:6b:7b:ee:dd:
75:3b:17:b6:70:6d:58:fa:75:6f:39:af:17:c9:9d:29:bf:1d:
e7:cf:7b:fb:b3:52:fd:b4:71:e5:27:f6:9f:b3:47:42:32:7d:
7e:78:44:f1:44:7b:f0:a9:4a:9e:9a:6a:05:db:d7:13:e5:d6:
c5:af:d2:16:b3:67:21:7f:03:72:f2:71:0a:ab:c7:d2:59:35:
11:7e:22:03:bd:5a:3a:fe:fa:2e:70:ea:e9:e2:28:4d:d2:c3:
82:25:f5:30:9f:7c:24:b0:0e:7d:a2:88:b9:c3:e7:da:6b:93:
5b:37:e3:87:bc:d0:ff:6b:55:46:0d:ce:31:3d:00:48:ce:92:
12:22:b6:41:cc:9a:2a:09:94:dd:2a:6f:57:64:7a:97:e7:b8:
24:c7:87:0a:b8:01:b2:a8:e1:fa:44:21:4d:99:56:cb:15:35:
20:42:19:37:f7:b8:5a:60:a1:20:04:c0:5a:e0:b5:ac:a1:57:
1c:87:cb:b5:8c:f8:bc:d1:55:7d:26:38:b4:6b:25:ad:f9:7a:
da:db:47:a8:df:33:1a:44:09:3b:2f:0b:41:50:ee:d1:f4:54:
30:9c:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:08 2025 by rpki-client