Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: lqADoADMCnzNSONioX4TsVCG1IWig8QI3CPn3I/RQfY=
Subject key identifier: CB:64:3B:B7:19:BC:E9:E3:FF:00:B9:98:09:54:4A:35:55:4C:EF:7E
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 0198D65F74E266C721745C0E5C534245D72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: X2MhVHrcF8dFLMJVbuoA8VClpEUgbz/7pCE7K7ceXpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:74:e2:66:c7:21:74:5c:0e:5c:53:42:45:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=cb643bb719bce9e3ff00b99809544a35554cef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:79:39:2e:56:57:02:c4:61:70:a2:55:c9:
44:f3:c3:62:a6:b4:94:78:c6:be:4e:78:b3:a1:2e:
dd:5d:76:ea:85:8c:c3:ee:0b:68:a4:69:34:30:2d:
ed:44:22:aa:2a:b9:b5:f9:45:bd:08:3c:ed:33:f2:
15:bd:9c:3a:29:84:92:1e:4f:b5:f5:98:90:50:63:
24:9f:ea:64:ae:51:eb:9b:41:94:58:03:49:c1:68:
b8:72:93:2c:a2:49:57:b7:3b:27:41:0c:1d:88:e5:
8c:83:7a:d5:3b:27:af:b6:5b:d1:ca:6e:f2:8a:f2:
cd:ae:e0:80:4c:17:73:43:1c:f9:ab:94:54:55:61:
7f:15:17:6d:b5:aa:53:6e:f4:94:0e:dc:af:6a:6a:
01:66:95:e6:22:57:41:c9:8a:35:8d:7a:be:1c:5a:
01:38:95:7e:be:3c:6b:4e:a8:52:98:31:df:52:fb:
d8:cc:6f:db:b2:80:93:1d:3d:69:19:60:25:a2:30:
27:fc:8d:c2:32:77:38:7b:2c:6b:8f:75:00:8b:7d:
f6:52:ad:4c:bf:86:e4:40:97:ed:33:ca:29:e2:f0:
97:36:82:b4:eb:87:aa:20:66:84:c1:a5:be:6b:2a:
7c:ba:db:60:9f:cf:24:d1:6c:3d:ff:74:6a:a7:3e:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:3B:B7:19:BC:E9:E3:FF:00:B9:98:09:54:4A:35:55:4C:EF:7E
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:45:a6:90:46:2e:33:99:4d:42:84:a3:2b:ab:86:65:5d:0e:
68:f9:87:65:c1:51:48:a2:b3:e6:40:ca:ab:ce:36:34:1d:0c:
14:c0:10:15:12:37:97:ec:dd:4a:4a:f1:2c:c4:aa:ff:41:d6:
3e:3c:c0:82:39:83:df:91:ee:f3:be:9f:70:c5:14:dd:a1:c9:
4b:a2:6d:f9:11:38:c1:a5:2d:a6:ed:1a:e3:fb:29:50:c2:3a:
ca:93:27:a6:3b:55:35:57:41:0d:c3:98:43:90:4d:f6:82:28:
9a:71:ed:ea:08:d0:ed:01:99:d3:ba:72:44:c8:38:8b:bf:67:
95:e0:b1:60:27:2b:72:4a:7f:e3:c4:4d:01:1a:ac:bf:f9:ed:
21:ba:8e:39:d9:a4:ea:bc:bc:c2:ee:9f:70:a9:28:8f:8f:ba:
b4:45:ae:41:ae:e9:f9:ce:78:7a:88:fb:6f:b6:93:b7:9d:e4:
1f:bc:40:55:9f:3b:65:ad:14:22:b8:b1:df:75:b0:6f:9f:42:
76:0d:6c:f4:1f:74:6f:9a:ca:46:46:d4:63:67:e3:5a:15:8a:
38:0f:17:08:dc:e2:03:ae:b3:74:a8:84:27:fd:8c:fa:11:21:
ef:1c:96:18:fd:69:13:67:57:ef:96:b2:46:8e:d1:a5:67:33:
52:7e:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:40 2025 by rpki-client