Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json)
Hash identifier: qTk6z0ypxsWzn9tJHZ89HneApmO3d+qm+mqF3Kp0IOg=
Subject key identifier: 90:59:95:46:EA:9F:25:92:18:C3:77:F8:24:6E:47:0C:A7:66:5D:50
Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Certificate serial: 019891B5D38CD63E974AB65F277B9A387B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
Manifest number: 02A8
Signing time: Sun 10 Aug 2025 02:01:09 +0000
Manifest this update: Sun 10 Aug 2025 02:01:09 +0000
Manifest next update: Mon 11 Aug 2025 02:01:09 +0000
Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: lM5occn6E3YKIW97E0+Cb1y7dyDhWo9Knixt58drxXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:d3:8c:d6:3e:97:4a:b6:5f:27:7b:9a:38:7b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Validity
Not Before: Aug 10 02:01:09 2025 GMT
Not After : Aug 11 02:01:09 2025 GMT
Subject: CN=90599546ea9f259218c377f8246e470ca7665d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:52:df:43:80:df:51:3a:ba:5e:5d:a0:a5:
3d:21:87:0e:e3:9c:d9:17:32:d0:99:65:d1:3c:7f:
e8:54:90:c0:7a:40:a2:50:ec:f2:09:ce:d4:f3:12:
d2:13:6f:ad:6d:c8:59:a8:70:57:4e:83:ee:36:b3:
ea:64:37:ba:48:db:7c:4f:9b:5a:2b:9d:91:f9:a5:
2c:18:22:ba:9d:fa:89:63:b0:dc:62:78:2a:06:e1:
fe:e0:29:be:22:8d:b6:32:a7:c8:fb:b0:9a:3e:1a:
c9:77:47:b8:7d:d8:24:62:a5:0e:02:23:45:5e:aa:
6e:4a:ae:e8:b5:5a:78:78:a5:37:29:8e:30:dc:09:
71:2c:f9:fb:8b:15:5c:c8:76:04:98:ee:3d:1a:1c:
1a:29:05:f0:03:30:3d:d8:ed:29:cd:a5:4c:f2:03:
84:51:20:d2:64:24:80:c8:09:c4:d9:b1:a9:af:1a:
a6:e4:66:4a:a5:0c:d7:e6:58:ea:50:88:f2:4a:66:
cd:c1:b9:29:83:a0:26:39:a9:a5:59:d2:99:5a:0d:
56:36:77:ca:75:fc:9d:96:b2:0e:66:d3:55:30:1a:
b1:7f:31:5e:93:7d:15:ce:65:37:9e:93:85:6d:6b:
bd:78:93:91:c5:88:74:df:87:50:76:e8:f5:18:9d:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:95:46:EA:9F:25:92:18:C3:77:F8:24:6E:47:0C:A7:66:5D:50
X509v3 Authority Key Identifier:
keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:9f:fb:9f:b3:89:bc:21:ac:a8:6f:d1:82:f3:b4:30:bb:
63:d6:58:0d:ab:9a:e3:d4:44:10:68:61:fa:8e:92:a0:c6:e9:
15:9b:07:2f:34:6e:f4:9f:77:32:ad:dc:de:4d:0d:55:46:ab:
78:93:bc:2e:0b:67:a0:9d:fc:48:83:77:f9:4a:3a:d7:b2:a0:
97:de:cb:97:6e:1d:10:5c:1a:1b:6c:4f:ff:1e:93:fe:eb:f5:
21:2a:10:50:ec:c8:14:f5:f9:93:c4:de:68:ec:5e:3e:37:45:
32:51:a7:86:5e:ed:07:00:c8:54:74:ff:21:d1:9b:a5:dd:20:
84:20:ac:52:07:0d:6f:d3:e2:0f:90:98:60:2f:d7:3f:8a:d9:
74:2b:ea:59:74:b7:f6:b4:b6:3f:16:ed:a8:7d:f1:ef:47:48:
35:6a:ae:a8:0b:33:87:38:f2:c3:fa:e9:b3:3c:97:97:cf:a3:
41:2e:36:9e:06:3b:20:74:8d:b9:38:4d:03:0c:5d:c5:d2:64:
79:3c:2c:07:71:10:08:eb:c3:06:d3:c4:33:e5:38:e2:1f:4c:
aa:21:3a:c9:24:15:30:d0:8a:38:b7:c5:bd:40:21:ee:08:b5:
52:06:33:27:d6:57:c6:3c:ad:e3:c1:be:a8:5e:81:21:84:b0:
5b:61:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:30 2025 by rpki-client