Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: Cvy7UPWyBkhMWNlpLLMA5zvb4Y8dmSdTnAIWlRyYH6Y=
Subject key identifier: DB:BA:CB:49:D7:C0:26:DB:1D:7F:22:BE:79:EF:1E:48:14:8F:1C:E6
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 0198D65F67EBC297658822C13F234AB8A99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0A09
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: yTTWBXGJIBfe9Rx1G8AMYdi3kZL2G2mN24FD6qoLMvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:67:eb:c2:97:65:88:22:c1:3f:23:4a:b8:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=dbbacb49d7c026db1d7f22be79ef1e48148f1ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:3f:1d:c0:1a:a4:02:e6:0d:6a:86:ae:a9:
af:2e:e5:a2:5b:63:5e:04:0d:ee:0a:df:14:d3:a7:
34:fb:d6:5e:be:c3:6b:9a:5c:98:56:bc:cd:6e:94:
19:ff:d7:d1:74:bf:2d:00:3d:e6:99:61:db:ab:89:
b7:27:b4:a7:91:f0:2e:a6:4b:7c:16:86:ce:b5:1c:
30:23:36:51:2d:23:5c:f3:4b:22:6e:f0:53:f3:b0:
bf:88:17:01:34:06:79:dc:50:f6:dc:68:cd:e4:16:
d5:72:5f:7c:61:d4:fd:6a:c6:d2:bf:de:1b:bd:bd:
d2:17:8e:f5:1a:15:6b:27:b4:62:1c:6b:91:36:15:
63:2c:9f:2f:de:24:54:07:0d:aa:da:6c:cb:71:c7:
5b:e2:ae:cc:dc:1c:f0:7e:2c:e1:23:17:4f:bf:74:
cf:b0:93:37:e7:09:34:70:e5:45:77:28:3f:3d:21:
ff:2f:c1:49:cb:1c:a0:22:15:31:ad:cb:e4:e6:92:
d7:1f:14:5c:6e:b3:5f:5d:a8:ae:f9:0b:b6:3c:c5:
a7:d4:c6:53:7b:24:21:11:ad:1f:a4:27:41:0f:c8:
2b:25:42:cf:ba:05:9b:c1:66:f1:a0:0e:ce:40:dc:
59:1b:58:20:b2:0e:6f:36:57:70:3a:77:98:3c:1f:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:CB:49:D7:C0:26:DB:1D:7F:22:BE:79:EF:1E:48:14:8F:1C:E6
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:9a:73:d7:0b:3a:a5:02:9f:33:01:93:d6:26:59:02:e4:
14:8e:cc:18:5a:9f:4b:29:cf:41:68:de:59:e3:6c:77:f7:de:
12:2e:6d:57:71:48:35:c0:43:2a:b8:58:3f:35:93:66:d2:34:
f0:5f:e6:12:df:e3:fb:1b:8f:7e:36:07:72:f2:ff:6f:8d:69:
93:7d:9f:6d:f9:b8:68:b4:10:87:f5:b9:c2:ce:00:75:01:21:
ca:57:42:18:57:22:52:58:bf:23:38:b6:34:e9:7d:e1:b3:c7:
b3:94:41:fc:dc:86:fc:43:de:5e:d8:82:19:5f:4d:bb:8a:e7:
b5:8f:1a:f0:b0:33:6c:0b:ef:23:60:54:93:04:cc:eb:69:ca:
d4:37:bb:d2:a4:2a:b8:42:85:1b:69:a9:88:77:9e:af:8c:fa:
80:39:4e:66:9f:7b:a7:f9:60:72:dc:4a:18:27:9a:9d:c6:ef:
9e:c1:b9:7e:2b:3c:17:75:8a:9c:2f:7f:fe:31:cf:e5:37:1d:
b4:5f:db:59:f6:fe:1d:42:0c:43:5d:ec:f0:1c:38:9d:44:48:
ab:e0:b2:bb:9d:d1:70:fd:b4:53:d2:8e:ca:9e:e1:35:07:41:
e5:b4:c5:76:37:ad:43:b0:23:c2:8c:7f:ee:41:01:f2:c1:c3:
66:7f:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:01 2025 by rpki-client