Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: Awv1xI47BOCLJlxnkRaH+kbgc5ofX8t6SXDJNHRggl8=
Subject key identifier: A6:2C:13:65:E2:15:9D:32:C4:D1:95:D0:90:98:45:51:39:1F:B5:48
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 0198D4724F15E635C31381DC3B5492A3DB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 1265
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: oXEZkRLpWb/OTabF2ylFigFo8JblpRNpL2QvbryQ+zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4f:15:e6:35:c3:13:81:dc:3b:54:92:a3:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=a62c1365e2159d32c4d195d090984551391fb548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:f2:22:27:4e:b6:94:70:fd:6a:b2:d1:04:
eb:52:5b:c8:72:52:f4:57:d4:5a:aa:c4:27:a3:8f:
63:80:c1:44:cd:3c:12:d1:d9:d1:cf:aa:bb:9d:7e:
dd:90:d3:d8:08:48:5f:78:f5:10:e0:46:5c:cc:8d:
52:73:ca:f0:7b:6b:1e:c5:cc:ff:ba:f0:04:c1:89:
19:fe:49:0c:8a:4f:40:a5:33:f7:84:f7:0c:17:a7:
1f:92:0b:23:c8:3d:81:16:19:2c:f1:87:bd:8e:87:
cf:06:e5:ec:05:fb:54:99:2f:30:93:aa:66:3a:94:
ed:f3:b4:b2:04:1a:7a:91:6a:fe:f6:60:8f:c6:05:
7f:5e:40:45:91:39:a5:97:8c:28:47:5f:69:bf:20:
49:57:ac:a9:d1:4a:02:cc:46:ca:3e:0a:b5:ae:9c:
10:10:de:a8:79:5f:4c:19:61:bd:04:9b:0d:f5:08:
44:64:ce:a5:e6:12:3d:11:8d:47:36:51:93:f9:5a:
f8:3b:68:94:91:62:5c:fc:47:f4:8d:3c:a7:e4:cd:
f3:b4:54:d7:06:a2:9c:7f:42:73:33:e6:3f:6c:40:
b2:f1:65:cf:3e:4b:f7:4a:31:ef:b7:a9:42:3a:9e:
0b:97:17:62:ea:23:00:77:fc:3c:43:5e:99:4c:00:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:13:65:E2:15:9D:32:C4:D1:95:D0:90:98:45:51:39:1F:B5:48
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:27:2a:a5:44:75:6c:e3:a2:9d:3e:79:5e:6a:12:3b:ce:98:
41:77:48:d2:94:6a:1f:0c:45:5a:68:c4:cc:2d:90:54:aa:cc:
00:e0:4e:a7:3f:2c:9d:ca:f2:e9:da:2c:c0:30:c0:cb:04:1d:
91:2a:dd:7c:9a:13:3e:26:82:aa:d2:b8:3a:54:86:71:ca:1d:
56:ba:78:38:a2:f0:c1:58:ef:d2:56:7a:86:3f:e6:98:d2:76:
83:d4:11:0d:82:b4:98:45:f6:5d:d4:df:9f:58:0f:6f:86:c5:
2e:ee:29:80:aa:28:26:7b:ea:99:c7:19:02:6d:fe:50:69:0e:
f4:f9:97:64:79:9e:10:7a:d2:05:8c:ae:b3:d1:fc:a3:61:ee:
1e:7d:e0:70:13:7e:4a:6d:54:c8:25:f3:f0:cc:06:33:38:ad:
39:8a:31:b5:3b:df:e5:06:d0:9d:b9:2d:a1:83:ad:9a:b3:82:
06:cf:30:0a:19:ab:7d:71:b9:86:4e:59:48:f8:b5:54:ae:15:
1d:f9:ce:c2:d6:88:48:42:c1:72:8f:f8:fa:1a:f2:37:ea:1a:
cf:2c:e8:a8:37:67:f7:05:b7:d9:2a:05:69:43:78:87:52:d5:
32:22:93:70:37:be:7c:cc:61:6b:f9:dd:9e:99:0e:e7:38:bd:
83:b6:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:30 2025 by rpki-client