Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
File: ogqr6NvAhXg0PCW4xomHpevAOMk.mft (raw, json)
Hash identifier: zhlOxVeN7or5KJ4iEdTPJ4fnO0vumWkVZ5IJE9R8UGY=
Subject key identifier: 07:B6:79:B2:5C:36:75:FA:94:4D:7A:FD:27:9A:37:FD:DD:D0:47:7B
Authority key identifier: A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9
Certificate issuer: /CN=a20aabe8dbc08578343c25b8c68987a5ebc038c9
Certificate serial: 01987298CB58246326CAA768117484F6CF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
Manifest number: 66
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: ogqr6NvAhXg0PCW4xomHpevAOMk.crl (hash: zgkKSg4I1vrUKH8eaEaJs3RlsOzbCnQZ+3l9lVKy2tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:cb:58:24:63:26:ca:a7:68:11:74:84:f6:cf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20aabe8dbc08578343c25b8c68987a5ebc038c9
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=07b679b25c3675fa944d7afd279a37fdddd0477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:a6:7d:a9:74:71:6f:e0:b2:37:38:ee:d6:
4c:f7:51:51:11:74:4b:b1:15:d6:3e:ea:b3:27:7c:
5f:ca:e0:27:4e:9d:a7:50:3c:7a:c6:65:14:a2:26:
a4:ed:74:35:3d:e3:96:aa:1a:04:4a:dc:66:7a:34:
9d:07:bc:42:f7:3c:9a:fd:36:97:30:c8:a3:c1:20:
e2:82:a4:b0:6a:fe:4a:da:1e:1a:f3:21:c5:0c:e6:
63:16:9c:99:ab:5c:c2:6e:37:92:8f:f3:84:69:c2:
2d:8e:89:6b:a8:97:60:00:19:7c:ba:87:1b:47:4d:
c2:90:37:d4:e4:4d:af:72:1e:ea:c8:ab:c4:d2:98:
bb:8b:b3:24:8f:72:f6:2d:56:34:0e:49:aa:78:67:
52:0b:17:ab:1b:15:b5:c4:77:70:59:a0:04:a4:d1:
d1:13:4a:52:ba:ac:20:22:58:5e:ac:f5:87:f8:cd:
0a:44:fe:b5:d2:0c:9a:d9:37:90:5a:05:8c:e6:e1:
ab:c9:95:7e:f1:5d:75:dd:6d:78:cd:39:96:98:6b:
82:b5:0f:1e:da:8e:96:aa:f4:2f:d0:fa:2f:49:0e:
d6:49:d2:2b:dc:38:22:d7:c3:73:2c:ac:f4:43:ac:
bc:1a:65:3b:8c:2f:c5:2f:6a:5c:6f:e6:c5:34:61:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:79:B2:5C:36:75:FA:94:4D:7A:FD:27:9A:37:FD:DD:D0:47:7B
X509v3 Authority Key Identifier:
keyid:A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:44:56:0b:48:9c:2b:08:cd:7a:ac:a4:78:4b:c4:15:a9:
ce:80:4b:19:b9:60:3b:dc:2c:55:ce:b4:2a:37:65:ad:ad:ae:
9a:69:ac:e8:98:3b:93:6d:02:c2:39:99:7b:92:e8:3e:9d:d3:
67:f9:9d:b8:c2:12:a7:da:9c:fe:3b:94:44:b9:49:16:2e:dd:
47:b6:c9:50:8e:e3:ba:af:71:4a:c1:4b:ba:d6:6a:3d:79:76:
35:d1:62:64:7b:17:18:20:e3:98:ed:c2:35:f1:c3:dc:ee:0b:
87:b0:7b:e6:9b:0d:45:10:8d:7c:e7:9a:8f:43:16:f4:2d:38:
57:da:9d:a6:86:87:d1:80:7c:d7:a1:26:d4:ea:68:e7:1e:c7:
88:d5:69:26:45:83:1d:27:5a:15:d4:ab:17:85:34:c2:2f:32:
b7:5d:bf:7a:25:9d:55:24:cc:21:15:e8:a9:c4:bc:bb:b3:c6:
e4:c2:8d:ec:f4:2d:18:5f:b7:36:48:f9:ce:1e:2e:31:65:33:
d6:ba:c7:45:e0:a7:47:af:6f:9f:9b:f3:ce:ff:c4:23:09:bf:
f6:1a:63:e5:68:66:86:09:5b:23:b5:aa:48:88:21:eb:ff:f6:
bd:c7:0b:93:b1:f8:39:5f:64:99:3a:c0:f2:d6:a2:a1:47:42:
32:bc:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:59 2025 by rpki-client