Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: Y4JZ//B4tGo8hmp3Q7zY9YBS4wJ6/mGy7N1gIgzGU7U=
Subject key identifier: 60:28:3C:44:B0:80:85:A1:00:DA:5E:24:53:46:0A:E7:D0:17:F8:07
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0198A04DCF9C95ED44582ED11C0A1E00A2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0F2D
Signing time: Tue 12 Aug 2025 22:01:50 +0000
Manifest this update: Tue 12 Aug 2025 22:01:50 +0000
Manifest next update: Wed 13 Aug 2025 22:01:50 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: Pa9pmGlQBdshvNxKdkjRsrkqeMLpnnlQGL3gRU4lqJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:cf:9c:95:ed:44:58:2e:d1:1c:0a:1e:00:a2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Aug 12 22:01:50 2025 GMT
Not After : Aug 13 22:01:50 2025 GMT
Subject: CN=60283c44b08085a100da5e2453460ae7d017f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:f7:62:a2:02:36:2f:a5:9b:48:fc:1f:9e:
29:e0:dc:21:6e:30:62:b4:b1:53:c6:30:94:d7:2c:
55:d0:80:2c:e8:cb:05:66:28:4b:c0:16:f5:68:78:
eb:a3:68:bb:20:df:38:67:36:85:e0:bb:cd:2f:ad:
19:0e:be:a4:d5:dd:95:76:a9:4c:ac:82:81:e6:95:
30:47:db:7d:ff:dc:ee:6b:77:ac:14:2d:48:f6:b0:
8a:f5:44:79:58:5a:1a:6b:68:2a:fe:6e:6a:ec:57:
13:1f:1d:65:96:13:90:9a:34:fd:50:71:3b:45:73:
e8:5b:2b:46:79:f6:42:3b:79:a3:ce:28:e3:53:58:
1e:e0:f4:d2:f5:4f:e1:73:23:1d:ec:21:e9:42:9d:
0a:1e:a3:ed:af:87:5a:8e:8f:a5:cf:dd:81:7d:05:
2e:c9:40:76:68:a5:e8:24:5c:94:77:92:3e:6f:4b:
44:db:9e:ca:b4:a1:da:88:da:d8:01:b0:87:fc:53:
e9:c1:62:48:fe:7b:c4:3e:f6:a1:1b:77:88:56:bd:
7b:48:81:69:e7:f4:8a:27:9a:37:03:f9:54:4d:6a:
77:90:29:32:8f:ae:00:d8:a5:6a:d1:c7:ab:48:ad:
9a:53:8b:06:b2:2c:32:11:8c:f5:2e:22:54:5f:b2:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:3C:44:B0:80:85:A1:00:DA:5E:24:53:46:0A:E7:D0:17:F8:07
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9a:fd:71:0d:37:27:a5:12:09:8a:e0:56:1d:e9:2c:2d:3e:
68:80:7f:db:3c:a2:2a:11:11:8f:3e:4e:ab:c1:00:eb:f4:2c:
60:c3:03:e8:65:9c:f6:68:f7:65:ac:13:cc:e6:72:73:34:67:
02:0d:6f:37:b9:04:9a:68:11:76:db:e9:4d:4f:28:26:ee:94:
c1:a6:1d:46:b9:f0:9e:8b:86:3d:23:9a:75:fa:54:29:83:8c:
54:99:3a:02:91:02:89:e8:d4:a2:30:eb:36:11:63:5c:f8:2f:
db:18:17:0b:0f:e7:67:5a:a8:ee:98:74:e0:9c:a4:14:55:02:
29:0b:d0:62:57:76:06:44:de:4e:1c:ec:00:c3:da:9c:92:83:
40:aa:86:f2:dc:df:30:86:ac:49:2e:ff:d3:1d:a0:e6:8e:2f:
a5:c1:ad:bb:9c:b2:bf:13:79:cb:c2:7f:fd:3f:db:ac:4b:40:
88:d2:18:5f:a6:a3:ab:29:f5:b7:86:9f:5d:1d:87:79:04:14:
cb:7c:59:81:a2:84:66:8e:91:eb:0f:52:6b:7e:b9:84:2a:e0:
bb:f5:8a:c0:71:38:0a:b5:53:fa:99:c4:23:e5:7f:65:0b:ca:
ea:8c:81:80:21:60:12:0b:89:02:6a:98:2f:cf:22:57:7e:c1:
5b:aa:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:05 2025 by rpki-client