Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: hcktRaH+cG8sv+lv2MxkkbisfaauV9jX3V6bFyRTSVo=
Subject key identifier: B5:C4:9F:8A:C4:BD:A8:C1:FF:B2:C2:09:89:88:71:2C:5C:44:85:38
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 01989F03597425BBC542DB5DAA698A2258FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 14FF
Signing time: Tue 12 Aug 2025 16:00:53 +0000
Manifest this update: Tue 12 Aug 2025 16:00:53 +0000
Manifest next update: Wed 13 Aug 2025 16:00:53 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: hjjmL1JUbba6bIBl5yxg3VhIxFXujvEi/V7uO1bfRDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:59:74:25:bb:c5:42:db:5d:aa:69:8a:22:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Aug 12 16:00:53 2025 GMT
Not After : Aug 13 16:00:53 2025 GMT
Subject: CN=b5c49f8ac4bda8c1ffb2c2098988712c5c448538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:78:ca:f1:53:61:2e:26:13:93:c1:81:52:
56:de:78:a7:6c:3a:8d:74:7e:41:4b:e6:d5:dd:87:
ed:21:93:e1:37:5c:70:af:57:4f:66:a6:65:4b:d2:
f9:32:38:06:0b:ae:2d:27:89:e2:fa:4b:0f:f7:b6:
36:16:64:c2:d1:49:5d:26:64:49:ae:f7:bf:02:cd:
8e:fd:df:75:20:86:9a:1d:8e:cb:1a:1f:72:74:fe:
91:c9:f4:b6:45:53:cf:f7:b5:6a:c6:cb:8e:fe:49:
5a:e1:ba:77:01:df:02:b6:6a:ea:fa:7d:cd:90:b6:
f2:ee:77:04:d4:64:32:31:d1:9f:90:6a:3b:ee:fe:
2b:c6:55:eb:2a:7f:a2:57:16:bd:d9:ba:6b:08:19:
38:93:56:57:b2:0f:ad:d6:08:04:37:4c:33:37:b5:
58:16:ea:5b:d5:38:94:d5:d0:89:cc:7f:f9:d0:6e:
c5:a9:2f:07:9e:27:95:ce:ca:3d:eb:8c:30:1c:f4:
ea:6e:91:12:59:76:9a:5b:9c:77:a1:9b:e8:d3:c2:
af:41:d3:15:d8:db:11:85:5d:a2:91:c7:09:b2:69:
6c:ce:8b:c1:56:41:6f:ed:66:2e:f9:28:ce:0c:42:
f9:c0:48:37:94:f6:c3:fa:94:a1:24:08:8a:ef:c6:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C4:9F:8A:C4:BD:A8:C1:FF:B2:C2:09:89:88:71:2C:5C:44:85:38
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:ec:b3:fd:8b:7b:f3:0d:f3:99:d2:13:e3:7e:3e:b7:09:
40:be:48:1f:b5:fa:a7:75:0e:67:b0:90:f7:e5:db:3e:b3:01:
a6:cb:73:b6:92:70:62:7a:59:d8:21:8f:47:8a:0b:93:41:18:
02:de:9a:11:f9:11:6a:1d:69:6f:80:18:39:0b:f4:af:7c:64:
d1:bb:86:e9:45:fd:cf:cf:d7:bd:8f:c0:91:46:2c:de:64:f4:
38:5f:6e:d1:cb:10:58:fc:b4:e7:e3:14:1b:1c:79:c0:8a:33:
83:0b:06:4d:eb:4e:06:dc:57:76:4f:d9:fb:91:7b:34:72:3a:
bf:69:ae:7a:b8:f4:31:d0:7f:06:68:31:6a:52:5b:ab:b9:2a:
ef:ce:b8:16:4b:a4:93:0b:26:f5:a0:e5:0f:ce:a0:14:f5:c9:
b6:29:48:c2:95:50:ef:5c:89:02:14:4c:72:f6:cf:36:83:54:
7c:44:8c:81:9b:1b:45:0a:cd:8c:f6:8b:40:ee:74:05:ab:db:
99:41:85:c1:2a:aa:f0:de:c1:76:c2:d6:f3:8f:d5:38:1f:41:
bc:e6:cb:7a:ac:02:77:ba:dc:19:18:06:70:c8:3d:7d:4f:eb:
d2:75:a4:3b:57:0a:5e:3f:45:74:2c:fb:d5:ac:20:49:7f:d5:
fa:c3:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:36 2025 by rpki-client