Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: ztXt4f30EGMWZTXbxFuszKjuFtIcRdIzOyoZP7/szKc=
Subject key identifier: D8:9F:22:DA:A1:12:BE:9C:ED:26:EE:14:EC:14:12:70:12:8D:05:5B
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 0198D515D9E276E349C7BC246CB04F3CF0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: 8K+UeRoFmix+Oe6WAtJobx+kvXrENqOfi/GkwymeGAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:e2:76:e3:49:c7:bc:24:6c:b0:4f:3c:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=d89f22daa112be9ced26ee14ec141270128d055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:7a:cd:ab:4c:11:f9:d1:69:d4:3b:52:24:
71:07:13:cf:38:3b:c7:18:b7:d3:68:47:84:9f:a3:
de:33:71:0b:8e:8e:33:fb:9c:10:29:ef:bd:25:03:
80:f0:4e:df:e7:20:c5:b2:80:91:c3:6f:17:a0:d1:
46:13:fb:04:fa:ef:72:83:dc:55:e5:8f:11:d5:74:
50:6f:1a:a9:c9:34:b9:ad:95:2a:2c:97:55:a1:8f:
3b:8f:be:e1:d6:ae:55:28:2a:c7:16:c1:7e:ce:87:
50:84:88:67:4e:74:43:45:98:68:fa:ea:74:94:b7:
d5:30:6e:43:fa:4a:8d:48:ff:69:1e:97:15:93:f5:
d4:3e:8f:79:38:79:c5:bc:07:99:83:b3:a2:96:de:
d7:65:1e:0a:24:1b:e8:73:0e:b0:56:63:74:9f:0e:
36:f8:da:6b:50:12:5a:e7:88:95:22:e4:8a:80:36:
07:8a:a7:43:36:05:10:08:87:78:f0:43:c1:f7:79:
a3:ac:c5:1c:a7:a7:00:87:7c:0a:b3:9d:82:cd:8d:
4a:60:96:28:11:b4:ef:10:af:22:93:b3:23:04:21:
af:a3:e3:e8:6b:07:ae:dc:86:5d:1d:37:f6:39:84:
8f:58:e2:b7:5b:01:c2:b8:12:95:e6:af:6b:ac:f1:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:22:DA:A1:12:BE:9C:ED:26:EE:14:EC:14:12:70:12:8D:05:5B
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:11:72:d0:60:50:3f:ad:40:13:ce:ee:f5:6f:b9:c6:bf:
27:da:10:4d:6b:95:b7:aa:24:13:d4:47:8d:3c:aa:b1:c0:b5:
48:61:59:dd:55:d0:36:b1:d0:ad:b5:8e:e5:79:c0:a5:cd:8a:
fc:38:a7:f7:e5:54:e6:00:1d:04:b4:3e:8a:dc:a8:42:0c:01:
2b:d1:e1:95:cf:7d:02:e0:d7:99:69:62:95:2a:3f:01:75:3d:
f5:36:2f:07:13:16:77:88:b0:eb:6c:69:1d:a5:3f:4f:79:63:
97:78:9b:ce:fc:69:0d:62:73:71:d7:ad:95:cb:77:85:cb:97:
7d:b2:dd:64:c7:4d:5a:e1:2f:09:18:02:63:79:d4:b1:1c:1e:
7f:8b:16:e3:62:75:3c:a1:2e:09:13:30:27:67:19:ef:2a:b9:
2f:36:bb:b1:ef:2b:8c:21:e8:6b:6a:df:fb:47:12:a5:c4:c6:
a9:96:9f:7b:35:08:7c:4a:f6:e7:df:75:af:2c:e3:94:1e:b2:
10:8b:ff:6c:51:5a:c5:c2:a2:13:f8:5d:7f:6f:8c:38:a9:1f:
17:c1:f3:23:4a:cb:c1:e0:f9:9a:32:2a:31:be:bb:2e:e9:37:
09:f3:ba:0e:fb:fd:29:42:c5:3b:2f:e1:f0:55:8c:20:61:97:
94:a7:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:09 2025 by rpki-client