Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: RsVjhmFGY5aB146WeYYbpxtskYo4fIVckdioALav8xM=
Subject key identifier: E8:86:E3:65:0F:FB:D2:F2:B2:0B:BC:6F:C7:B0:6B:90:6B:35:21:B3
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 0197B6A03AE2A0835B767ABFD357B500EB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 135A
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: e98q2MIyw+ZM5XPwKK/GSLOLOGwDWJBpoLFghjZhAbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3a:e2:a0:83:5b:76:7a:bf:d3:57:b5:00:eb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=e886e3650ffbd2f2b20bbc6fc7b06b906b3521b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:0a:0e:17:28:7a:7e:e5:5a:50:cf:6c:37:
b0:ed:7b:06:7e:22:41:92:71:c5:97:77:10:68:f8:
f5:ba:15:d7:d2:2b:f1:e9:8f:07:16:d2:a6:1b:a5:
2a:dc:99:3c:c2:b8:86:80:c7:68:c9:6f:82:00:f5:
e6:4f:07:36:83:4a:8d:61:79:bb:de:8c:a7:ff:67:
25:5e:7b:68:41:93:74:c1:61:45:75:00:80:ac:00:
33:5b:b6:5d:9d:4f:11:20:ec:06:f7:a3:f7:44:96:
a7:de:5d:b1:69:04:0a:f5:f6:e3:5a:8b:0e:07:c7:
a0:19:0a:5b:0a:6b:0d:02:f8:7f:3c:2e:3d:07:b4:
b6:dd:9e:b4:cb:1a:8e:e9:88:86:6c:a1:c9:ee:75:
7e:31:29:9b:0f:ea:58:a9:1e:20:53:de:82:e8:62:
7b:10:32:27:5c:2a:60:36:41:41:b5:48:53:7b:b7:
68:66:be:ca:77:5d:a3:6e:4e:ec:6c:50:e8:b3:ec:
f0:7b:0c:dd:f8:13:0a:cc:4a:96:98:55:32:5e:ea:
1a:ef:a1:30:36:e7:b7:54:4a:c4:76:94:22:30:af:
3c:d8:05:ed:69:58:8f:d0:e0:5f:01:8c:9b:ef:0a:
70:59:43:2e:a6:52:b2:4b:c8:f8:d9:93:25:6f:09:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:E3:65:0F:FB:D2:F2:B2:0B:BC:6F:C7:B0:6B:90:6B:35:21:B3
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:d4:de:e9:d2:f9:ce:a7:b8:3f:da:87:f6:73:d9:80:5a:
b5:8f:57:ca:f1:44:8a:78:ae:f7:b6:de:2b:b1:81:f4:be:00:
06:c0:eb:78:be:c5:b8:a3:ef:b9:ce:b0:bd:0b:49:45:2e:c2:
aa:c1:60:80:eb:6a:5e:a8:2a:a9:9c:03:e5:a2:79:2b:31:dd:
f6:f8:f2:f1:f7:be:a5:02:2d:57:24:e3:75:4e:c7:d7:c3:d0:
3b:23:ca:2b:b4:2a:14:a9:6b:62:4b:70:05:1d:29:4f:03:95:
7b:e7:1f:c4:9f:cc:16:35:d6:0c:50:8d:69:96:2c:b4:de:55:
44:10:45:a8:48:2f:c4:69:ea:b9:fb:a0:79:64:c4:af:e1:a2:
46:dc:4e:46:99:f6:cd:4d:cf:2b:15:2d:9d:a3:51:cd:bb:74:
ab:c6:09:ba:26:c7:04:87:b1:17:c3:32:91:a2:f6:d2:7b:9c:
24:15:7c:d1:ea:c1:44:a8:ac:54:3d:da:96:96:5e:59:2f:e2:
cc:b6:46:e6:43:d3:ae:cd:e3:89:0e:17:e9:b8:90:3d:23:ec:
fe:c2:4a:1a:c8:7b:bf:3b:a2:0f:3d:1f:b6:7f:cc:96:a9:7c:
3e:b8:cc:42:39:d0:18:2d:1b:af:84:36:b4:42:3f:f2:de:0a:
0b:91:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client