Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: Ptm0MS3Va7DMyKMslyzS6hUAr1Q5flJj5d3aHeYikk8=
Subject key identifier: A7:F8:B4:21:D5:A8:BA:6B:6D:33:35:C6:FD:5F:97:DF:60:A9:9D:20
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 01988B7CFA24E9F87F3CA7015E4E21515506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 21:01:20 +0000
Manifest this update: Fri 08 Aug 2025 21:01:20 +0000
Manifest next update: Sat 09 Aug 2025 21:01:20 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: 1BMOJxnzqsKA1WdOLM6nXKHYsm5Wx5NQp6vr/GAzMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:fa:24:e9:f8:7f:3c:a7:01:5e:4e:21:51:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Aug 8 21:01:20 2025 GMT
Not After : Aug 9 21:01:20 2025 GMT
Subject: CN=a7f8b421d5a8ba6b6d3335c6fd5f97df60a99d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:e7:53:87:0a:82:91:2b:fd:1c:b9:fc:db:
ca:03:0d:8d:e6:91:81:56:0a:74:20:7f:84:61:f6:
c7:14:98:e4:f4:08:80:c9:7c:76:a5:52:cc:10:18:
fd:65:96:a8:41:a7:88:42:97:4d:2b:2b:4c:09:fc:
a2:dc:ed:8b:de:7e:e4:9e:af:b8:41:90:eb:4e:fc:
ba:ff:ec:29:8f:7c:b9:e4:54:b6:09:85:a8:84:a9:
85:98:81:34:27:4a:be:5a:3f:9d:34:86:8b:68:5c:
37:ea:eb:81:34:77:07:30:1c:e3:83:fd:75:9c:47:
40:56:a4:5d:d3:75:44:ae:59:63:09:63:15:4d:a8:
56:3e:f0:2e:d0:fb:cb:b2:19:29:2b:0c:5f:61:4d:
67:31:2f:58:9d:73:43:3d:ca:4f:e1:ef:8e:4c:ea:
f1:3f:0e:ae:84:1b:df:ba:f1:ea:57:fc:18:e0:40:
59:ef:3e:49:80:05:9a:72:ca:51:53:90:b0:1f:fc:
14:73:60:a7:ee:44:d2:10:41:fc:68:81:c5:4a:b7:
3c:1e:aa:d5:c3:53:03:dc:79:d5:f3:d2:a0:62:dd:
41:c4:cc:3c:52:94:14:72:0d:ac:69:70:3b:eb:66:
3b:8b:6c:3b:c3:7e:33:e7:5d:5e:fc:58:b2:bb:6a:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:B4:21:D5:A8:BA:6B:6D:33:35:C6:FD:5F:97:DF:60:A9:9D:20
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:8d:c7:91:b1:87:7d:95:9d:f6:3b:36:d5:f5:38:52:c4:
a5:47:09:b0:39:3c:69:50:65:58:bf:99:5f:a9:80:54:d5:0f:
cf:13:83:9e:41:07:90:63:52:b0:d7:7d:90:68:87:ed:ba:1d:
fc:41:68:c4:9a:23:ca:a5:dc:2e:b1:34:c8:f1:32:26:22:74:
0a:08:20:51:f5:e8:ed:35:42:ef:b1:88:3b:ce:cf:cc:9c:e5:
a1:11:17:13:7f:bd:da:4b:f6:3d:94:ab:16:a9:d6:9e:96:3b:
cc:f7:18:ce:0e:8d:ff:2f:82:97:06:d7:72:e2:1d:4e:01:ce:
ab:35:91:b5:82:12:7d:0d:08:57:24:3e:0b:10:a2:2a:20:81:
38:b4:7b:c1:42:e0:5e:ef:ff:cb:d9:9e:3c:e2:10:f2:2a:be:
0c:12:da:7f:37:79:4a:e2:89:69:d8:4c:fd:c1:f6:39:4f:03:
c2:05:69:9d:60:96:62:7b:aa:f5:3b:7c:f5:b0:c7:f5:78:0f:
3a:fd:33:40:bb:9b:4c:2a:57:65:2e:17:da:1e:c9:3c:fc:9c:
d0:e2:b9:c4:91:76:b3:2c:19:3b:f1:2e:21:f5:45:83:4b:06:
e7:59:90:8f:15:5f:72:34:e2:3b:3f:81:17:a7:93:81:bd:57:
6f:5d:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:32 2025 by rpki-client