Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: 5J97FhQnK6DeuxrhBOlxOOsZvrXFAQ1jkeM0WRNYsqs=
Subject key identifier: D7:07:52:BD:A1:87:17:63:E0:3E:43:6D:51:83:70:13:EC:29:1D:02
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 0198D660E9FA97B26C86A1F1F0082BE84D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0DA4
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: GhFESZDEUUlsRad4DMSvwWbXGg6z41Du2XwyGQi3tpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e9:fa:97:b2:6c:86:a1:f1:f0:08:2b:e8:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=d70752bda1871763e03e436d51837013ec291d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:08:e7:3d:2a:a4:b4:8d:c4:b3:72:31:38:
9b:88:3a:cf:47:ff:2f:cd:28:40:4b:9b:54:d6:58:
31:20:83:43:65:f5:2a:48:09:fb:b3:4e:0f:d3:de:
14:78:54:09:e6:d3:45:6b:06:c6:8c:ae:2d:8b:ea:
46:87:6d:ec:e1:1e:a9:6b:d9:c2:74:b2:7a:94:38:
aa:c7:57:44:3f:5a:20:d4:9d:1d:05:aa:21:ec:e5:
c6:5c:53:7a:d4:5d:88:a7:2c:7c:5f:d7:62:3e:b3:
24:be:9e:50:29:b6:91:1d:72:7c:29:dd:13:e1:53:
51:6b:31:8b:75:aa:c6:6c:79:73:4a:99:6a:fc:76:
be:ff:11:7f:f8:df:ca:ce:92:ce:55:75:de:6a:90:
1a:d9:be:59:a0:9f:fb:4b:93:c3:3a:1e:fe:17:c4:
ca:36:a9:df:c1:24:13:82:ed:cf:1c:3f:73:b8:67:
21:65:1b:66:53:7e:a3:5f:6a:8e:e2:dd:d3:28:b8:
52:ce:10:9e:04:86:27:ac:cf:95:ae:e9:a3:51:81:
e7:cf:21:ef:7c:07:d8:00:a3:21:e1:2c:c9:cd:21:
fb:07:2e:5b:55:5a:36:f2:5e:c9:db:ed:57:43:61:
56:89:05:c0:4e:1d:e3:06:a4:c2:f7:88:7b:c9:b6:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:52:BD:A1:87:17:63:E0:3E:43:6D:51:83:70:13:EC:29:1D:02
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:77:34:11:2f:2c:de:2c:8a:a2:bd:13:a9:22:a6:c2:41:21:
d0:1f:0b:6c:a1:1a:1a:30:fe:e0:a8:d6:42:bd:f6:85:c6:80:
c8:c5:e6:0b:f7:e0:f9:99:82:a7:af:15:18:34:12:b8:63:ac:
b3:a8:4d:aa:b2:11:fa:b3:ce:f9:dd:06:7b:db:53:bf:fd:eb:
69:00:2e:7a:6c:46:e0:68:4b:46:0e:78:e5:a1:a3:d9:e5:db:
a5:ec:62:26:29:5c:21:e3:cb:d8:94:fd:a6:a6:bc:bc:51:84:
ee:d8:67:d0:da:76:5a:b2:ac:f0:de:71:44:f5:39:bf:90:cb:
37:90:05:66:64:ab:e4:8a:79:09:2e:b5:cc:cb:ce:52:c5:5d:
f3:e8:8a:6c:03:6f:51:58:a3:75:89:a4:a8:53:ab:67:0e:a1:
1e:74:e4:9a:87:d3:89:88:ac:39:9c:91:7b:35:3f:11:d8:92:
43:dc:f5:f1:24:0b:f4:25:0f:ce:b3:95:13:fb:00:0c:08:e3:
a9:fd:68:21:36:dc:11:d1:88:42:67:95:45:bd:a1:9b:58:e1:
1f:37:65:a4:44:b4:aa:1d:0c:3a:ca:48:07:44:12:16:8d:cf:
4e:f4:0b:51:98:9e:6f:af:7b:30:af:4a:05:b9:c6:15:38:2b:
dd:95:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:55 2025 by rpki-client