Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File: Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier: TYnnO0V9p/NKpq8h110d74WXlQ+6P7ffTyL7GbiLsU4=
Subject key identifier: 24:7D:5A:AE:90:2A:52:F0:D3:98:FD:00:FF:F5:37:CB:80:7B:79:F4
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer: /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial: 019896A5FFF2BFA743049685213D35E2A63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 01:01:58 +0000
Manifest this update: Mon 11 Aug 2025 01:01:58 +0000
Manifest next update: Tue 12 Aug 2025 01:01:58 +0000
Files and hashes: 1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: sHPWlI1ZNeW2QTVtSWIF8pAjfkf4bcrCdZ/LYWXcUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:ff:f2:bf:a7:43:04:96:85:21:3d:35:e2:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Validity
Not Before: Aug 11 01:01:58 2025 GMT
Not After : Aug 12 01:01:58 2025 GMT
Subject: CN=247d5aae902a52f0d398fd00fff537cb807b79f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:02:f2:71:89:31:a9:d0:9c:e6:0a:d8:a0:
e1:85:ed:87:86:fe:bb:3d:24:d7:25:44:d3:7d:ad:
38:67:8a:b1:8f:5c:72:c1:ca:19:3d:7a:f5:f9:0b:
72:37:84:62:f6:e2:80:f9:9d:8c:1f:11:62:75:20:
67:c9:36:e6:b5:8d:33:47:6c:7e:a8:8a:8d:b2:4b:
b3:65:f9:01:fc:3b:93:bb:ea:75:88:59:4b:9f:40:
47:74:3b:fe:55:53:c4:03:03:ab:43:3f:75:5a:8f:
7b:c3:7f:a1:75:28:d3:7c:82:43:d0:5e:49:33:7b:
15:2d:88:d5:2e:1f:dc:fe:55:19:45:30:68:65:75:
a5:3f:ef:b4:b3:91:30:fb:3a:bb:77:74:26:9c:89:
e9:c1:98:78:6a:00:04:01:2c:4d:8b:d6:30:11:34:
58:f9:09:0d:65:25:63:da:97:a8:79:e4:ed:68:15:
26:ad:da:61:84:7b:84:fb:65:78:d6:c4:93:e7:8d:
b5:2d:bf:60:b9:99:81:4e:e4:b0:67:b7:20:d6:88:
93:e5:1e:32:f1:1b:72:33:c0:91:aa:57:93:49:ba:
f6:86:43:63:59:0e:11:a6:58:9c:b5:27:15:9b:66:
68:97:91:6c:8a:27:63:05:91:75:e1:6d:8b:45:2c:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:5A:AE:90:2A:52:F0:D3:98:FD:00:FF:F5:37:CB:80:7B:79:F4
X509v3 Authority Key Identifier:
keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:77:7d:d2:59:b1:b5:9e:64:72:8f:cb:23:d3:11:60:42:60:
85:bb:99:21:e3:9d:5e:6e:26:11:97:b2:f4:02:fb:02:96:a4:
67:c3:98:a9:d7:e1:65:14:ef:6d:f5:bc:ec:4e:0b:47:87:b9:
60:0b:09:9b:15:1c:3b:77:b9:6d:94:8c:33:ac:7e:56:39:9a:
15:5b:e5:21:c8:e7:92:4b:84:d0:b4:85:a8:c1:ef:9d:f1:da:
9b:f1:8f:23:4a:c9:f2:83:c9:2a:08:2e:be:71:2a:15:84:28:
79:9d:11:ff:f9:7c:d0:4d:ea:62:cf:d0:98:da:eb:af:2f:e8:
e3:4f:d1:65:f4:5d:1d:e1:cc:3e:de:b4:8f:63:20:1b:cb:63:
e8:05:a6:01:be:c1:fc:32:56:84:60:4a:47:ce:9d:1d:f4:cd:
3c:89:34:01:bc:64:bc:f8:c4:9d:ce:cc:f1:c6:ed:56:12:6d:
ae:9c:68:67:5e:40:b4:90:b3:20:95:63:be:ab:30:ee:f4:30:
3d:2e:04:c1:0a:1f:30:f9:62:f1:dd:53:66:da:84:5a:fb:c5:
4d:13:e0:5d:93:72:3f:bb:69:d6:29:68:b4:b4:e5:6a:07:5c:
88:89:d5:e5:97:0b:11:6e:ac:87:e4:ec:a8:62:78:2c:bb:fe:
ee:c9:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:16 2025 by rpki-client