Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: dFHQl39SzKfcocbSpXl4a7OVwjUvhruG7KWvczvDXN8=
Subject key identifier: 92:88:65:C8:96:AE:3C:CC:20:68:31:37:81:B0:68:7C:71:47:FA:1E
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 01989F0377F03C59A358FEB9F15FF1D334E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 0DA3
Signing time: Tue 12 Aug 2025 16:01:01 +0000
Manifest this update: Tue 12 Aug 2025 16:01:01 +0000
Manifest next update: Wed 13 Aug 2025 16:01:01 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: XtbgURDARPEeY7moSoRbSOSZc1U5Khh4B4pAruYRzic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:77:f0:3c:59:a3:58:fe:b9:f1:5f:f1:d3:34:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Aug 12 16:01:01 2025 GMT
Not After : Aug 13 16:01:01 2025 GMT
Subject: CN=928865c896ae3ccc2068313781b0687c7147fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:6b:1b:5a:bc:1c:c4:5f:c2:a0:f3:48:f4:
96:42:e0:69:82:47:99:ce:57:3c:37:d0:47:75:c4:
23:f9:29:31:27:83:f9:6c:e8:bf:5d:c8:33:77:74:
d7:e6:70:f3:7d:b3:f3:da:36:ab:19:47:50:55:7d:
28:21:d8:c9:3c:e2:63:47:62:78:cc:9e:56:3c:86:
6f:f6:b1:e7:5b:43:51:88:ca:8e:dd:58:b6:3a:a0:
e6:d9:a1:6b:21:d6:03:4d:85:79:04:42:39:f1:d5:
f9:e7:3a:d5:5f:09:e2:ac:05:bc:dd:16:b5:6b:1f:
70:13:e0:10:ba:da:5b:a6:61:02:45:89:ee:2b:bc:
ea:eb:ee:4c:4f:da:bc:ea:8c:aa:32:8e:dd:dc:9b:
b4:92:5a:ae:a8:8f:d6:b4:08:f1:d0:af:5a:ee:17:
e8:f6:18:56:7a:31:fe:16:31:aa:cd:2d:a8:3a:06:
89:74:22:ab:be:ac:58:0b:79:d2:b6:28:3f:00:90:
21:e3:b9:0b:af:9c:34:f1:8b:07:f6:d3:e5:2f:08:
3a:3c:7d:2e:75:eb:3d:03:79:b2:03:b0:f4:23:f1:
e8:d7:c8:9f:ca:01:19:5f:d5:c5:e9:69:5a:16:11:
41:7e:72:77:9c:14:96:07:87:f7:b9:0b:54:b3:84:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:65:C8:96:AE:3C:CC:20:68:31:37:81:B0:68:7C:71:47:FA:1E
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:62:5e:a9:53:69:15:89:6e:43:75:4b:c8:74:dd:62:22:
cd:95:5c:59:bb:0f:dd:b2:6f:08:b9:3c:67:fb:00:d5:69:9b:
c0:c5:ab:0e:e1:2f:88:7a:62:90:08:78:ef:ef:42:62:a2:94:
0e:73:72:2f:6a:1e:ac:15:84:67:68:2b:87:1b:73:a2:41:f1:
ef:e1:d7:68:99:7f:a6:ac:78:b0:99:39:8d:c5:df:24:3d:dc:
18:41:18:9a:90:27:07:e0:76:55:8d:7e:4b:62:c1:73:54:3a:
63:27:4e:76:bd:20:77:ba:87:78:03:d7:a9:2f:87:50:35:37:
00:7f:da:bc:b4:b8:ee:5f:0d:6a:02:4b:73:02:4f:9d:b0:26:
46:ab:dd:9b:50:18:3f:1f:bf:b4:fd:e3:9f:15:1c:17:83:65:
c6:ca:8d:6c:81:b2:00:66:3b:d2:67:9d:d4:01:6f:67:bc:4a:
bc:81:10:87:35:7a:d8:7a:04:e3:25:93:4c:78:2d:f5:5d:f9:
0b:c3:9c:4b:89:0e:a0:77:51:a9:a4:b7:b4:ba:64:f3:34:75:
89:74:d5:fd:b8:cb:e9:e2:10:09:ab:6b:01:f6:39:cd:f3:8c:
28:83:cd:35:7a:25:c3:4d:5c:42:dc:98:c9:7a:e1:d4:31:c0:
7c:97:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:46 2025 by rpki-client