Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: GUk+sB5RUZ0EFY4sG/CWiTRoK1i1NgCbdLbJ0OkYZ3g=
Subject key identifier: D2:25:BB:11:72:96:5A:7D:E8:DA:C6:CB:F7:16:7B:49:C8:9E:7C:0A
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0198D660F36BAEBA2DFE6686DB8AA9F268B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0EE4
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: jThVy8XodchM4kRsteisn43ZWw1rIOwaWmOg/3OHkss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f3:6b:ae:ba:2d:fe:66:86:db:8a:a9:f2:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=d225bb1172965a7de8dac6cbf7167b49c89e7c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:e9:7f:86:65:16:e1:6b:d7:fe:d4:53:91:
05:9b:75:df:28:54:bf:64:7f:9d:b6:ca:38:39:8a:
2f:e3:de:0f:5f:26:3f:bd:48:fa:7b:85:8c:9a:8c:
d7:aa:f3:43:00:10:14:b0:a3:10:e3:ef:19:8a:c6:
17:7f:45:b7:5b:b1:00:63:99:eb:fd:8c:f1:16:4e:
f3:c5:96:1b:fd:d4:9b:b3:71:be:97:3f:20:11:59:
a9:d8:67:b1:56:cd:8f:aa:48:55:bf:7b:91:0f:67:
aa:52:9f:d6:04:f1:78:71:71:97:1e:8e:41:5d:db:
3a:44:a4:56:d1:04:5f:df:a8:26:96:5f:7e:dc:16:
66:44:b0:17:1b:46:12:ad:39:64:39:82:8b:58:c6:
c1:65:dd:cc:65:97:da:41:f0:79:22:f9:5d:ed:6e:
c6:e4:68:b0:43:53:11:c1:8a:34:32:10:ce:0f:2b:
89:c9:9b:23:a2:e3:07:44:3c:28:df:97:ab:c5:51:
88:26:d0:b7:46:7f:69:cf:e0:f1:08:0b:69:cb:a2:
aa:cd:29:75:d8:0c:28:7b:ce:f0:0f:db:30:90:0e:
12:fd:53:2b:cb:d7:35:a4:53:04:78:6b:f3:7a:bf:
28:50:0f:3c:db:5d:4f:bb:c7:b9:d4:84:d3:24:a6:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:BB:11:72:96:5A:7D:E8:DA:C6:CB:F7:16:7B:49:C8:9E:7C:0A
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0e:07:7f:d4:f9:00:72:a4:ee:f6:91:fb:aa:dd:27:bf:f2:
19:d6:e4:71:e2:88:b3:83:43:b7:b5:b0:57:32:40:6a:5c:ef:
dc:b4:a0:6f:e2:93:44:b7:17:cf:7b:40:3f:05:8e:ef:cd:31:
6c:bd:a6:b5:04:9b:62:a4:80:d2:17:ce:d1:5e:56:31:5d:00:
c9:bd:f1:27:4c:ad:c9:ab:dc:43:7a:62:58:0d:5e:02:3f:8d:
10:3e:43:64:1a:2b:b3:34:cb:26:38:d7:7c:94:51:86:c5:05:
49:f1:ff:8c:9f:ed:21:3a:8c:ff:6e:76:ba:0d:e3:fc:a6:ee:
c3:02:0c:3c:20:28:78:58:45:18:29:22:26:ed:fa:d2:20:db:
28:10:0c:fc:14:d9:54:b4:99:f1:ed:70:b9:0d:f0:5f:be:18:
20:cd:af:b1:bc:b2:6d:8d:72:5e:0e:db:67:b9:12:2c:fa:47:
2f:4b:94:1f:b6:b7:a6:94:b8:e1:35:11:c8:f4:4d:df:e7:16:
29:50:81:9b:d9:61:f6:d6:7c:4e:a6:85:bd:ec:07:08:7c:d7:
ba:2b:f2:7a:10:f9:cc:12:db:71:7f:30:71:ff:d9:da:31:fa:
20:11:1f:6f:ac:33:5e:af:93:0a:00:15:f8:4e:fd:50:32:e9:
5b:9a:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:14 2025 by rpki-client