Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: 6x90xwGcrUtJ7HtwTzECx+YAXf5Krl0XllYNYrZTPKc=
Subject key identifier: 2E:0B:55:EB:0B:F6:D1:79:B6:D9:CE:D5:AF:4C:BF:2E:D5:40:09:6F
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 0198D65F3FC4707B25130F15BBD1A7533AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: kQ821FZgesvKpxFdUkXpyMojYqHLtrOirsXqnZaNjdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3f:c4:70:7b:25:13:0f:15:bb:d1:a7:53:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=2e0b55eb0bf6d179b6d9ced5af4cbf2ed540096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:32:11:7c:cf:8c:d2:ad:bb:d1:9e:e0:3f:
9b:b0:c9:90:b7:aa:87:0c:c7:05:69:67:73:8e:ed:
92:76:73:a6:b5:06:2b:90:16:42:8a:fa:cd:15:43:
2a:ab:7f:c8:8e:15:0e:38:3d:39:37:02:07:c5:de:
b0:0e:71:a0:e7:69:d5:58:39:7e:16:77:4e:a2:7b:
ed:1e:7c:74:92:8a:52:cd:13:6f:ce:b7:f1:64:d8:
10:1a:58:cb:cb:43:8a:7b:9a:2a:51:6b:29:61:46:
4a:80:6e:b5:77:30:5d:b7:cd:73:e2:ea:4a:0c:38:
e1:ad:69:2f:b1:2c:23:f9:81:28:f2:3e:38:19:32:
39:de:7c:2f:47:df:cd:61:94:c7:53:c4:44:b2:2f:
57:60:1f:56:02:0e:32:85:48:9f:1a:1a:9d:e7:fb:
31:28:f5:d8:c4:4a:1e:50:60:fc:f3:09:06:83:16:
0d:0d:e9:48:bc:48:14:25:af:1f:44:5b:7c:e3:79:
51:63:c4:ac:67:7a:76:fb:2c:bd:f4:77:29:9b:8d:
c1:46:41:a8:75:d9:3a:66:45:98:35:fa:57:bb:8c:
40:de:53:df:6f:76:82:d9:a6:0d:3c:fd:b5:a1:23:
b6:3d:95:fa:ab:f1:c3:7a:da:69:89:6f:9e:2b:0e:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:55:EB:0B:F6:D1:79:B6:D9:CE:D5:AF:4C:BF:2E:D5:40:09:6F
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:29:a0:40:b7:4f:16:7c:80:41:df:77:80:a0:69:4c:4d:ac:
2c:09:03:41:f6:a7:2e:b9:04:a8:47:41:74:45:3e:85:ab:32:
5a:9e:3f:56:db:58:eb:00:d6:9b:c7:8f:e6:e8:e4:7a:0b:77:
18:85:5d:c3:60:07:3a:dc:0c:9d:f7:b9:9b:86:be:46:9c:07:
16:10:99:a4:43:77:44:42:10:0d:29:72:2b:64:89:66:ad:85:
f0:22:04:94:17:d9:e4:d5:1a:3e:83:c6:b0:22:5c:9b:6e:cb:
02:9b:09:3a:25:f9:29:25:51:87:39:20:79:98:f3:e6:23:54:
d3:d6:06:3d:93:62:94:2d:ec:3e:d6:19:4f:be:5f:14:0c:86:
c8:13:40:a2:10:ae:3f:a9:cf:3e:2e:23:96:4c:32:14:85:58:
a0:f5:8b:e7:22:3f:67:91:40:d0:bc:67:51:c3:f9:f5:61:ec:
f4:0e:48:a0:de:0f:7c:c5:c4:f8:4c:fd:2f:51:17:9c:6a:39:
ac:05:43:d3:14:34:a5:e0:e5:dc:bf:fd:39:35:cd:0c:f9:97:
e9:1a:47:ed:42:e2:ca:41:55:a1:52:23:4c:13:6c:ca:76:d6:
a9:0d:45:a5:fd:85:86:d9:16:6d:20:e8:6d:f7:d7:c2:e9:7a:
7d:cb:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:04 2025 by rpki-client