Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: Y+ZrxpexuW+JH4459oKdjTJxhg8aCttXjZ9bWZ1pdiw=
Subject key identifier: 0B:9C:56:12:5D:8D:3B:AA:C0:EE:77:83:E5:B1:FA:08:AC:0C:30:9E
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 0198D6617993194F8A376CFAF8087F089058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 1613
Signing time: Sat 23 Aug 2025 10:02:48 +0000
Manifest this update: Sat 23 Aug 2025 10:02:48 +0000
Manifest next update: Sun 24 Aug 2025 10:02:48 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: VPVo3uz1MRp70HxnhNJ5e2JrnimNpdFmXq0+REzvS4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:79:93:19:4f:8a:37:6c:fa:f8:08:7f:08:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Aug 23 10:02:48 2025 GMT
Not After : Aug 24 10:02:48 2025 GMT
Subject: CN=0b9c56125d8d3baac0ee7783e5b1fa08ac0c309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:3b:be:51:68:4a:ec:6d:39:6c:a3:90:97:
07:da:a0:ea:a9:e3:de:6e:69:c6:df:62:d9:85:9e:
72:e1:71:62:b6:c0:ca:cd:27:7d:71:79:0b:2a:77:
dd:f5:b9:f5:8d:21:44:19:2b:b7:b2:27:ed:74:d5:
1a:c2:29:a7:9a:dc:70:cc:dd:67:ae:06:a0:a5:da:
62:8f:3f:77:24:98:fa:4e:70:93:8f:62:66:c9:8e:
94:ef:0c:58:73:0e:f8:28:9f:b5:b1:8f:06:dd:03:
78:ee:40:aa:fc:87:e7:8d:54:31:58:ae:5f:02:4f:
c6:2b:4d:e3:80:05:23:e2:ea:b0:6b:97:41:a3:54:
a6:44:37:98:34:2d:3b:73:13:9c:6e:42:1e:00:ec:
fa:9a:1b:9d:15:aa:14:1b:5d:3a:0a:34:a3:b5:dd:
6a:54:be:0a:27:4b:03:9f:73:9d:10:97:e0:91:77:
d9:bd:c2:3b:1f:8e:8c:c0:dd:f2:a2:f9:c2:ae:70:
94:55:80:f1:e9:33:e2:9c:cb:40:ca:58:f0:98:55:
d8:8c:e7:c3:9d:e9:fa:c7:16:e2:3f:9c:11:a7:44:
1b:17:a7:e6:e6:77:4d:68:c8:b4:5c:de:c5:93:5b:
ed:8c:8f:cf:54:58:97:39:1c:b0:60:8f:00:a4:0d:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:56:12:5D:8D:3B:AA:C0:EE:77:83:E5:B1:FA:08:AC:0C:30:9E
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:e5:1c:88:d2:47:77:31:5f:86:ca:23:e9:65:9e:65:a0:
4a:d6:4e:e4:16:be:e3:34:f5:03:37:b9:d3:10:69:40:b2:35:
4a:f3:a3:b0:bf:cd:bf:98:f7:4e:ce:1f:41:ba:8f:78:55:05:
cc:d2:6d:70:57:51:03:fc:b7:ec:0c:e0:90:da:3a:46:9e:ef:
cd:1a:50:34:ba:b9:d9:ec:0b:90:4b:d6:0e:87:cb:9f:10:ae:
91:a2:db:76:ef:22:3c:c8:8f:73:06:53:0d:9d:12:70:f7:cc:
20:f2:3c:08:a3:f1:6d:3f:5a:72:7c:56:9d:94:20:81:8e:e2:
5b:a5:77:c2:8d:81:9e:cd:12:f9:23:0b:b7:07:79:5f:1f:24:
7b:41:9e:d3:18:a8:d3:ba:57:b3:a4:dc:e4:37:3d:6a:bd:d8:
4c:74:7d:26:31:62:f2:7f:5f:15:ee:f1:42:3f:b7:2c:5a:00:
c8:96:f2:4b:77:ff:22:6b:e9:37:08:a0:d4:f8:68:cf:37:e0:
22:35:e7:bd:58:98:94:7a:e5:7f:51:cf:19:f3:05:25:c3:c1:
2c:0c:48:6b:32:8c:ec:b6:7e:01:c0:c0:b6:3f:49:9d:3d:f4:
60:e9:0b:fe:6f:5a:54:36:52:00:f5:5e:2f:3b:1b:9c:0d:13:
af:f5:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:51 2025 by rpki-client