Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: u3adbS1w3EOr5Vqvpj2xI1DQPfCZLlkZt7km6aDbLdI=
Subject key identifier: 70:39:32:DD:F4:13:9C:65:8A:E1:DA:D0:5D:88:88:C8:F8:7F:20:18
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 019892C836F93B77D997911A8F68F07E9191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 1052
Signing time: Sun 10 Aug 2025 07:00:51 +0000
Manifest this update: Sun 10 Aug 2025 07:00:51 +0000
Manifest next update: Mon 11 Aug 2025 07:00:51 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 9aTjh5w0fljiSBkzHhd0mS+IELV1lDOcKl1CAEGXP1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:36:f9:3b:77:d9:97:91:1a:8f:68:f0:7e:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Aug 10 07:00:51 2025 GMT
Not After : Aug 11 07:00:51 2025 GMT
Subject: CN=703932ddf4139c658ae1dad05d8888c8f87f2018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:15:4a:d9:5b:2c:07:42:44:74:04:75:a4:
9e:b5:d5:fb:20:24:b3:58:e5:45:ea:0a:9e:3f:46:
1c:82:55:d6:e6:59:cc:b9:ae:66:27:24:eb:11:64:
b7:af:37:d4:c8:9d:ca:f4:56:34:94:db:be:31:c8:
fb:b1:90:58:10:ba:7f:0e:9a:2d:29:5e:96:3b:32:
8a:88:32:5d:fa:7c:8a:22:42:b5:51:31:21:02:fc:
75:0b:a5:64:83:4c:15:9d:68:75:6f:60:98:85:02:
d2:40:39:6b:f6:b9:f5:52:28:d9:bf:13:82:63:ad:
e3:5f:c6:bf:c1:87:dc:ea:2c:1d:24:93:13:ad:4c:
d2:1c:96:88:b6:a2:2c:9c:c8:e7:a8:3e:1f:d9:16:
02:55:cf:82:36:94:1e:09:d7:4b:0e:62:80:d3:99:
dc:33:99:14:0f:e2:c8:ad:31:77:40:1e:67:d2:57:
40:98:e4:cc:29:54:a1:a8:2b:ab:80:d3:66:ae:39:
31:ea:ea:88:d7:88:3f:7a:37:c2:77:2f:47:ea:6c:
85:8e:6e:b6:0c:06:52:13:9c:db:58:ac:b0:74:a1:
38:1d:f6:2d:22:89:dd:2a:53:37:4a:f7:08:25:f0:
db:7f:5e:58:be:67:e2:b5:bb:4e:98:9a:86:54:77:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:32:DD:F4:13:9C:65:8A:E1:DA:D0:5D:88:88:C8:F8:7F:20:18
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bc:b6:bb:78:8a:d4:83:3f:81:d7:0e:33:1d:b2:91:98:d5:
1b:82:a6:52:f2:dd:2d:ba:f6:fe:68:c7:0b:eb:29:64:b1:50:
8d:ee:08:3a:7b:53:71:54:54:4f:4a:4e:28:fd:ba:59:b5:e4:
be:38:6f:e8:62:91:97:4b:03:8c:14:ca:84:7f:15:6b:0e:d3:
48:98:03:04:40:40:4e:f4:9f:83:2f:de:65:5a:c6:50:9a:e7:
87:7e:0b:34:d2:f0:22:fd:7c:bd:6e:2e:97:da:b2:64:4e:55:
0b:3e:d3:24:d2:d5:db:41:68:49:17:6a:f9:d1:58:70:fe:fa:
d7:e4:6d:1a:ff:4d:c3:0c:f8:d6:c1:ed:f7:33:5a:df:7f:86:
0d:6e:4a:7e:d5:dd:e5:09:a3:b2:cc:9b:36:ff:8b:63:f1:88:
e7:fa:53:68:5b:de:ea:9f:c7:5a:9b:3e:e6:36:db:f5:57:f0:
e0:c3:e6:46:fa:8b:5a:03:fb:6d:2b:f1:82:90:94:bb:a8:22:
73:e2:30:74:4a:f6:5d:e1:d7:be:a9:c2:c7:95:27:f8:6a:05:
1b:2d:c8:78:b2:e8:83:f8:5e:b7:5f:9e:5a:48:ce:87:0b:fd:
74:2f:aa:94:3c:5e:7b:e6:84:8f:37:ef:d7:1b:55:10:56:06:
e5:c0:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:42 2025 by rpki-client