Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: cAdG28Vm0olwaoyUS/j+w121c4UdglPXYwOs0sS9oyI=
Subject key identifier: 28:92:21:D2:3B:37:FD:91:68:6D:3D:4A:8B:76:54:10:04:8D:10:86
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 0198D4739BF5903C01BDE4D2EC2917AC331C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: xvOoou4Zi799uD9WFi50bqdSjOFDcN8uZ58TRcYx7JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9b:f5:90:3c:01:bd:e4:d2:ec:29:17:ac:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=289221d23b37fd91686d3d4a8b765410048d1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:f5:a9:b5:a4:85:8b:3e:3e:8b:3c:8f:cf:
03:19:c0:06:fc:eb:f0:23:a9:0d:2a:6f:32:c2:9f:
ce:ae:9f:12:65:85:fc:2e:c5:95:ee:77:13:8a:54:
01:0f:8b:60:82:20:e6:fd:d4:90:1f:ce:ab:9b:cd:
bf:4a:5f:07:c3:2a:ab:de:99:88:b2:e7:fb:8e:1d:
35:c8:35:fc:7a:a3:13:88:83:c8:80:4b:76:27:34:
fe:3c:38:61:18:97:53:62:9f:c1:40:15:79:d7:df:
98:03:38:a4:ef:09:bc:7f:7f:62:c2:ea:97:2d:ca:
cc:9c:c8:ea:72:25:eb:ca:b5:3b:6e:7b:bd:1b:d6:
93:2a:80:a3:2c:b5:6a:cb:2d:5b:89:35:88:06:65:
50:97:54:4f:ce:01:b9:28:45:4f:8c:7a:0b:5a:2b:
87:91:0f:24:95:5c:12:f6:63:51:c2:d5:94:95:65:
6e:a6:1c:70:b6:b7:a5:3a:56:65:79:26:ab:5e:40:
a9:9a:64:5e:da:3e:45:a4:72:b1:f0:b9:22:f4:a2:
57:f0:1c:99:fd:20:04:70:2a:fe:90:ea:0c:e0:84:
e1:3c:f4:fa:dd:7f:3e:a1:80:d8:3f:c8:70:21:8a:
82:46:de:35:89:f6:87:c0:47:63:38:99:df:a9:c0:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:21:D2:3B:37:FD:91:68:6D:3D:4A:8B:76:54:10:04:8D:10:86
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:f9:53:85:72:8f:1c:45:5f:0d:aa:58:df:9f:53:45:71:
85:0a:da:db:72:b2:80:3f:98:a2:f8:63:4d:6d:4e:98:8f:57:
4d:28:b1:19:4b:c2:ea:e0:f8:0d:c6:f7:cc:e4:9e:e8:b7:7b:
f8:0d:b6:c1:c3:7d:a9:44:93:d4:10:d4:b0:df:d9:5a:1b:26:
1d:d8:e9:11:50:fe:3e:b7:e7:4e:d7:44:7c:e7:11:87:f5:4e:
81:4c:0d:ec:b8:25:0e:2f:20:6b:4d:24:1f:3a:34:ff:34:bd:
50:b9:56:d4:fb:72:f7:d2:8f:af:7f:b2:64:dd:31:09:8b:71:
3b:8b:36:9c:68:f6:e3:fe:85:90:10:37:f9:71:59:66:dd:99:
54:27:5b:42:d6:af:ba:63:d0:7f:5b:43:68:b6:b4:77:48:eb:
73:bf:62:7f:d2:77:0d:95:e1:59:a7:7d:36:26:ad:76:ba:01:
ce:09:ee:97:1b:6c:31:59:b9:8e:f4:1b:fb:70:fd:be:8c:db:
06:f3:e5:9f:a0:b1:0b:e8:64:f1:14:29:5a:df:ed:fd:75:ad:
dc:21:71:f2:4f:2d:f6:d1:e8:6c:6b:f0:9f:70:98:9f:b2:3c:
67:2d:6a:60:e5:64:8c:22:28:b9:c2:ef:fd:62:bc:97:d0:ec:
22:dc:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:06 2025 by rpki-client