Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: r+DnBgpbeYZpoQSAS09mG+wr9FVzH8cg+NojcIZ+UOU=
Subject key identifier: F9:86:D7:39:32:74:F2:E2:8B:70:B0:21:D9:4F:20:28:A7:01:5D:12
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 0198D65F537CB2177AD63EF47EB7C63ABF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 09EF
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: EHPehuucCwUrwS+sLifiP/4aVlmJXMJAu5zK//DfGp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:53:7c:b2:17:7a:d6:3e:f4:7e:b7:c6:3a:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=f986d7393274f2e28b70b021d94f2028a7015d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:6b:c0:50:82:82:8d:7c:bf:ac:86:bf:fd:
78:1c:d8:1c:c7:0f:c9:55:6d:7e:78:f7:e2:a8:94:
11:b4:5e:7b:c8:6d:79:8d:ee:ea:c4:ca:cf:51:3e:
be:ce:7c:0d:93:bd:d8:2a:f9:a8:0c:01:44:f2:fe:
76:92:40:58:31:bd:bd:08:a5:03:0b:26:39:1a:e2:
4e:e2:ea:23:c0:0e:e2:d1:c2:52:bb:7b:74:99:db:
90:dd:e5:56:91:c4:f8:86:7f:03:4b:74:63:6b:42:
cd:74:4e:23:ea:66:84:aa:cb:04:8f:98:9e:57:15:
00:f7:e6:3f:95:81:ee:61:07:d0:49:32:e4:99:8d:
a2:02:f9:bd:e9:31:cc:5f:48:8e:af:9f:ae:98:c8:
f8:63:06:c3:49:40:62:75:c9:88:d4:cd:49:a9:f5:
a6:b3:15:9a:77:45:3c:30:89:dc:47:87:a4:75:c9:
74:ec:f9:79:29:52:d1:0e:e8:84:82:23:a3:50:63:
19:47:28:ed:93:a7:12:7e:52:33:87:f9:fb:83:53:
24:e4:a2:15:a2:07:89:6d:4a:95:68:30:48:79:19:
9c:53:68:8a:7a:51:70:c7:de:c9:53:d6:95:0c:c9:
9b:74:8e:86:2b:d0:5a:89:15:ee:77:3b:40:4c:0c:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:D7:39:32:74:F2:E2:8B:70:B0:21:D9:4F:20:28:A7:01:5D:12
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:9a:90:36:e0:43:c7:3e:c2:a2:62:30:d7:35:7f:69:26:d3:
3c:fc:75:82:68:a4:57:4d:c1:71:92:1a:94:45:2f:ae:11:34:
f2:1c:a4:de:f6:25:d7:d3:3d:70:64:00:99:7e:5b:70:4e:6c:
1c:61:8c:d8:5a:48:84:22:5e:e4:b7:0c:d6:47:f4:86:03:22:
c2:2c:d1:64:27:47:b6:a4:fa:f0:99:69:59:65:bc:1e:d2:09:
f6:cf:03:49:5f:de:9c:25:85:c9:44:4c:2c:76:21:ff:66:cb:
02:35:96:43:35:87:77:ed:27:8d:89:a2:b0:bc:b4:04:49:25:
9e:8f:ab:53:9d:2d:f5:75:e4:c7:52:50:f0:77:fa:31:f8:4e:
01:41:b2:02:1f:8f:1a:cc:72:28:e2:7a:64:2c:30:46:83:77:
da:91:02:2a:06:26:05:0f:4d:40:7e:0f:0b:29:b6:05:02:b6:
e4:6e:10:c7:64:61:7d:0e:c0:04:4b:40:5a:3a:21:1b:12:8b:
46:ca:08:7f:92:eb:59:92:e7:74:fc:a7:9c:37:8f:f7:d6:90:
9e:ba:da:b0:30:ec:c7:7b:f5:2e:2d:16:83:c7:95:98:10:54:
6e:7d:42:83:41:ad:1d:2d:f0:6c:c4:f6:f1:95:5c:56:64:f4:
b1:99:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:13 2025 by rpki-client