Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
File: oWhu-kcXfglRrIjFZNj4hQvuxdA.mft (raw, json)
Hash identifier: Ghh4pzG2hLaSBTahmoiDDmvhq4qZAExLIu2Zhn34084=
Subject key identifier: 3D:01:52:1C:17:42:44:05:72:A6:DF:48:FE:88:BF:D9:EF:AB:06:64
Authority key identifier: A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
Certificate issuer: /CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Certificate serial: 0198936D0D7ACA01C9A9B189CC239C48375B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
Manifest number: 0CB7
Signing time: Sun 10 Aug 2025 10:00:54 +0000
Manifest this update: Sun 10 Aug 2025 10:00:54 +0000
Manifest next update: Mon 11 Aug 2025 10:00:54 +0000
Files and hashes: 1: oWhu-kcXfglRrIjFZNj4hQvuxdA.crl (hash: Eo4WR6hGeOZLoQ2PBkpLKtouLkCMmM2v8mbThJxXQhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:0d:7a:ca:01:c9:a9:b1:89:cc:23:9c:48:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Validity
Not Before: Aug 10 10:00:54 2025 GMT
Not After : Aug 11 10:00:54 2025 GMT
Subject: CN=3d01521c1742440572a6df48fe88bfd9efab0664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:6e:ce:3e:c8:46:a4:9b:9b:29:ee:90:8e:
b3:2c:14:15:5a:50:a2:6f:a5:70:a7:05:3b:7a:46:
5f:32:0b:08:13:16:99:2f:8e:5f:1d:c3:13:63:10:
2b:66:ab:6c:82:79:5f:13:a5:df:b0:93:b2:67:48:
88:fa:66:9d:bc:c7:4a:54:6c:8b:b3:72:ee:82:2d:
b0:77:1c:52:2e:f3:25:b2:7a:c2:cb:33:d1:0c:07:
ff:e2:64:9f:44:9c:6d:9d:65:47:0a:7b:fc:58:d7:
29:4d:f6:d5:3d:43:39:d0:61:ea:8d:57:60:ed:55:
cb:04:21:4f:6b:60:96:9b:8f:4f:64:72:6f:3f:a4:
58:1c:15:86:4e:91:19:3e:e8:97:47:35:87:b9:72:
4c:bc:6a:5c:0a:00:10:b5:4d:62:36:bd:2f:b3:b8:
d5:20:01:40:8d:83:bf:c6:15:20:3f:a4:cd:c5:a2:
a2:4c:91:f2:64:c4:12:de:30:ff:2c:9f:5b:23:97:
43:a9:b4:b7:68:86:53:29:2c:66:31:54:77:65:a2:
b3:9c:5d:f6:c9:08:2e:e3:05:56:b4:46:3f:5f:8d:
27:5e:10:ac:cb:28:b8:ca:ae:15:89:ca:c1:50:55:
3e:85:d1:a5:7b:e3:cc:6b:b3:f4:59:75:5f:d4:0f:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:52:1C:17:42:44:05:72:A6:DF:48:FE:88:BF:D9:EF:AB:06:64
X509v3 Authority Key Identifier:
keyid:A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:d2:f4:53:65:c4:6a:76:13:23:2f:f5:fc:d8:77:12:7d:
23:98:74:f9:f0:42:91:bc:c9:0b:f8:df:24:8d:55:14:32:cf:
6a:70:d5:80:88:85:8b:5a:f0:bc:2f:0c:f7:4e:24:ba:ee:7c:
f0:14:b5:8f:b7:b6:09:da:7c:16:8c:83:c0:93:0f:92:01:e9:
ca:ca:2a:8c:44:c5:12:dc:71:7f:76:4a:cf:64:7f:ab:3d:37:
d7:5b:61:dc:2f:08:48:b5:50:aa:d1:42:7b:2c:d8:ae:bf:53:
59:b5:3b:1a:98:c5:9f:36:33:87:b9:40:75:a0:cd:26:f5:b1:
40:64:4b:4a:8b:50:2a:09:91:ea:36:4e:ec:e3:ec:ad:3e:52:
05:fa:11:00:42:3e:52:fb:c8:4d:86:5c:e7:5c:4b:31:72:8a:
a0:03:78:50:00:60:e1:42:d2:36:29:be:29:73:9c:e8:1c:00:
0b:9d:2f:4c:bd:d9:36:f0:55:c0:d4:6f:31:dd:47:d2:0c:dd:
ba:e4:4c:10:3a:db:c3:57:c6:41:6e:8e:82:c4:b3:08:85:21:
95:98:cb:4b:13:b9:eb:49:19:c4:0a:48:c2:81:e7:6a:2f:48:
a2:9b:4f:5f:cd:c0:ef:46:a7:2a:94:70:d5:be:44:bd:f1:f9:
d8:5b:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:44 2025 by rpki-client