Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: ZmBY31m7XOSk96+yuxuwhdWcQPM8HHpju+W2oNtNVRI=
Subject key identifier: 0C:15:D0:44:88:46:70:74:B3:65:3B:A4:4C:C6:F3:97:CF:87:26:FD
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 0198D54DFD7C7780493E26BB0D621806E7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 14F8
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: IowoyIF2Xu5dwJB3QTOYrPZURJNEiNs/Z8XFw5UEV8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fd:7c:77:80:49:3e:26:bb:0d:62:18:06:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=0c15d04488467074b3653ba44cc6f397cf8726fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:e4:4a:6b:88:65:a4:c7:b7:75:74:31:bf:
bb:5a:01:4a:7d:4d:7b:f5:32:00:8e:ad:e4:33:1c:
5a:0c:d7:5e:d4:69:1f:d3:07:ba:c8:4d:9e:4d:0d:
54:4a:13:b0:9e:32:3c:57:62:b8:ac:17:f2:b6:3f:
8e:0e:52:b9:5e:8d:9e:b1:cf:7e:63:d6:d7:96:91:
1b:f0:65:aa:16:ec:5a:2c:cd:c4:9c:df:e7:34:be:
13:1f:e5:40:f6:91:94:9f:ac:c5:ce:25:3e:26:90:
5e:65:05:0e:41:63:ce:9b:68:2c:95:58:c5:9c:78:
20:82:a3:f4:7a:69:a0:09:69:d1:0e:c1:cb:06:2d:
66:24:09:73:55:e3:5b:a4:ec:a7:b2:ac:8f:1f:b2:
d4:72:4b:fc:98:db:f0:c8:af:b6:f2:27:21:86:31:
6b:70:e3:4d:a6:29:3a:5b:0c:63:32:06:a9:a6:a7:
80:57:c2:33:ca:4a:af:b4:e1:33:fc:f6:15:65:6a:
73:b7:46:e0:aa:2e:13:16:40:55:f6:a9:0f:23:28:
0e:4a:88:ee:91:90:7a:46:86:39:93:94:8e:ff:ea:
a7:ce:64:5b:d5:f7:52:77:18:2d:10:ed:11:ad:50:
18:ff:86:a3:b4:f0:07:fa:9e:30:6c:6d:6c:4a:ea:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:D0:44:88:46:70:74:B3:65:3B:A4:4C:C6:F3:97:CF:87:26:FD
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2a:fa:ae:9e:f8:51:22:39:01:60:7e:b5:45:3d:ec:18:51:
8a:d7:4f:56:d7:4a:6a:c9:09:2b:8e:72:a4:c7:e4:93:41:1d:
b2:84:60:5e:79:a5:29:1f:d8:88:70:bc:d8:55:36:27:a1:75:
33:c4:ef:bd:b3:db:50:20:c4:a0:07:9a:19:ae:72:2d:c1:56:
7b:0a:03:d4:b6:16:f3:c5:42:c5:70:91:79:4a:49:0c:6c:7b:
16:fa:1b:28:f2:ca:7c:6a:80:0d:69:75:a1:5a:b0:79:6a:54:
65:de:0b:30:f5:a4:6c:28:23:5b:46:e3:3a:75:77:31:21:db:
2a:5e:e1:83:16:79:04:2e:c1:c5:a5:54:a8:9e:e9:cf:11:ff:
08:26:85:f6:09:5c:25:c1:d3:63:5d:33:62:f4:6b:c8:c7:f3:
6e:3a:7e:ac:74:19:36:23:70:ab:71:18:0b:2d:d5:0d:92:13:
2a:cf:6b:f5:03:9c:12:23:2c:83:7c:66:1b:65:7b:0a:d2:91:
4c:31:6a:9a:ee:80:53:6d:84:c7:d7:57:e3:52:71:2f:d3:df:
df:e4:c7:2f:f2:4f:8e:42:01:23:cf:02:ff:79:a6:5f:34:3e:
65:4d:1f:e6:9a:09:bf:01:64:42:3a:ea:4d:9c:4f:82:8b:ac:
1f:13:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:33 2025 by rpki-client