
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: O49e2E01FDKhs+vEUxv3v7TyTeM4n52BtW+o0hScTKg=
Subject key identifier: EF:7D:67:6E:3D:C9:ED:36:E4:C8:A2:9F:19:AF:E9:5E:6F:3D:9E:ED
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 01987ED38C98B89BC4A24DF00F5E680275EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 046B
Signing time: Wed 06 Aug 2025 10:00:49 +0000
Manifest this update: Wed 06 Aug 2025 10:00:49 +0000
Manifest next update: Thu 07 Aug 2025 10:00:49 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: BWP7lSyG/QDmq2JCiARAMVP7cAs0mBjHjwx1teMompE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:8c:98:b8:9b:c4:a2:4d:f0:0f:5e:68:02:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Aug 6 10:00:49 2025 GMT
Not After : Aug 7 10:00:49 2025 GMT
Subject: CN=ef7d676e3dc9ed36e4c8a29f19afe95e6f3d9eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:e7:97:a7:2c:e5:e8:ea:4f:91:53:0f:33:
7b:69:9f:01:d6:04:9d:b5:14:61:de:aa:ae:e3:91:
6f:8f:42:12:45:47:78:4a:84:24:03:c2:73:d4:5b:
ec:ac:6f:8c:d9:5b:88:15:79:43:01:6f:26:aa:34:
32:13:37:b6:34:16:dd:5f:84:f0:a8:54:d1:f5:c5:
0b:6b:e1:e6:b2:ee:24:d9:4b:7e:39:80:5a:42:0e:
6f:5d:28:1b:f8:2d:ac:3c:ca:1e:db:6c:a4:36:0b:
81:64:ec:ea:29:9f:f8:64:46:bf:eb:87:e9:0c:19:
b2:c3:50:e2:05:57:32:b6:17:31:a0:77:8a:80:0b:
de:41:bb:5b:b1:ba:ca:3e:4d:6c:50:5f:0b:2d:87:
3f:8d:34:60:da:ef:ba:54:81:83:7a:6a:f7:ac:c7:
fc:dd:71:d8:41:c7:0c:27:66:1b:94:d0:04:e4:05:
54:da:e8:9e:73:51:38:8e:58:27:43:23:e9:75:c7:
c7:74:fc:b6:c8:85:42:e5:c0:26:dd:02:ab:50:89:
ff:79:82:7f:06:f6:16:17:65:91:6d:db:02:6c:33:
49:24:23:0e:cc:f3:2c:8e:6c:a0:e0:8a:59:78:42:
05:5a:d6:f8:79:4c:4c:58:c0:a4:d0:4b:83:55:97:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:67:6E:3D:C9:ED:36:E4:C8:A2:9F:19:AF:E9:5E:6F:3D:9E:ED
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:95:13:9d:4f:85:53:c5:2e:e4:60:90:5e:dc:18:18:5b:89:
03:73:00:8c:de:79:26:82:ef:f8:46:a2:b2:55:0f:df:00:87:
e3:82:c1:e8:47:bc:46:7c:26:0d:81:db:c5:8c:0c:46:77:9f:
f1:a3:2d:7c:37:a4:d0:04:1b:76:1f:ae:2c:4b:ba:f1:34:38:
e2:f0:32:00:e5:4e:8d:c1:a2:d2:b6:90:a2:7f:ba:4a:fc:a6:
27:e4:fc:be:48:6d:55:b5:38:f9:e5:4d:df:d0:48:12:85:55:
46:20:2f:d3:be:68:52:b8:d4:c3:79:fa:c1:95:99:d0:16:cb:
d0:f1:14:3a:8e:1a:37:d2:c6:cd:ff:8a:b4:1f:6e:25:f3:fc:
b4:7d:3d:36:dc:92:a4:ad:06:e2:24:b0:a8:c6:3f:ff:d7:88:
ac:ab:24:41:3e:a5:c9:54:0f:0b:4e:7b:6e:01:b3:3c:ae:ed:
27:67:f2:8d:d7:f8:fd:4a:a2:96:08:66:5f:53:4f:ee:93:ff:
88:89:ad:d4:54:02:51:38:06:ba:6e:83:d8:9e:35:df:87:f9:
44:75:14:fd:ef:6b:58:48:c9:d9:69:4c:71:8f:03:61:48:da:
47:ee:de:90:e0:80:75:bd:08:01:cc:72:a0:ee:9e:d4:50:81:
52:94:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:11 2025 by rpki-client