Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json)
Hash identifier: L/l8O0oHSgOIiN4VShiEyXVfPyau7MwpfP1vh+74NCk=
Subject key identifier: 3E:F1:E4:85:D8:D8:D3:55:37:17:41:11:E2:FF:81:3C:59:E7:53:76
Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Certificate serial: 01988F59CFA86CF09B26C54896A6EEFCDE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 15:01:24 +0000
Manifest this update: Sat 09 Aug 2025 15:01:24 +0000
Manifest next update: Sun 10 Aug 2025 15:01:24 +0000
Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: 4Xblog14XYzj13deFZSQRHmuZgvm6OTYPoHeTSOtskk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:cf:a8:6c:f0:9b:26:c5:48:96:a6:ee:fc:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Validity
Not Before: Aug 9 15:01:24 2025 GMT
Not After : Aug 10 15:01:24 2025 GMT
Subject: CN=3ef1e485d8d8d35537174111e2ff813c59e75376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:fb:85:18:0c:cb:4f:3d:35:5f:6c:26:a1:
d3:37:b9:d2:9f:42:61:8d:74:9c:41:22:69:ae:36:
63:29:6d:6d:34:d9:96:ce:47:25:9a:a3:54:fc:96:
8f:de:c2:13:0e:8a:08:cb:34:60:df:c2:29:a9:b7:
7d:01:12:e8:db:e7:4e:f8:86:2c:5a:cd:ac:85:13:
ba:14:44:15:dc:d6:c4:31:e3:28:54:32:97:f0:d5:
34:1a:20:b3:65:5b:34:cd:b9:7e:c7:c3:09:c8:61:
fd:3a:3e:40:eb:9c:c8:db:73:1e:6a:c6:7d:1f:f6:
4c:15:eb:44:0a:dd:c8:f1:a3:b8:65:3e:34:8b:79:
ad:0d:3e:23:e5:0a:a7:97:8b:df:3f:ae:6a:b6:e6:
40:76:e4:d1:63:f8:f9:cf:a2:c8:2e:cc:41:8e:26:
b5:5b:fe:9c:5f:2d:6f:1b:91:db:e8:ae:cd:eb:0b:
b2:2a:53:ac:68:22:eb:66:02:bf:2c:2f:f3:0d:c1:
09:2a:9b:f5:a6:20:ac:9d:c2:37:af:b9:af:ca:27:
08:61:37:35:8c:87:15:42:a6:d0:e0:52:27:26:5d:
bc:f8:c0:4f:e9:4e:f4:4c:f9:9d:3c:9f:26:58:35:
aa:6f:11:82:15:3e:e9:6d:74:55:71:31:0e:d1:79:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:E4:85:D8:D8:D3:55:37:17:41:11:E2:FF:81:3C:59:E7:53:76
X509v3 Authority Key Identifier:
keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:32:69:cf:04:98:f8:01:71:24:53:1e:8f:34:8d:5b:3a:c6:
f0:a6:46:f4:a2:34:bd:ce:51:06:ed:ef:9f:79:44:da:1a:39:
65:6a:73:b9:ab:e2:bb:4e:8d:7f:d3:6a:f0:8b:2d:64:9a:c9:
69:b5:b2:97:dd:d4:f6:f6:8b:b2:1a:e5:07:9c:d9:db:31:b9:
18:fb:40:7d:f2:27:fc:f0:4e:c8:04:66:c6:fa:8d:2d:e8:2e:
b8:64:0c:d3:65:f9:6c:b8:97:30:27:5b:03:e2:f0:e1:45:fb:
a6:1c:07:9d:a8:cd:f4:2c:20:8b:e6:cb:d5:57:1a:d6:2a:e7:
97:09:cf:a3:e1:57:49:4c:7a:97:f9:00:7e:83:0c:18:9b:5b:
f4:9b:69:73:7b:b6:78:49:a5:40:5b:02:dd:e7:15:5c:ab:d8:
90:af:f9:31:ba:dd:3f:ac:de:8b:1f:d4:57:78:b1:e3:4f:37:
3d:3c:fc:c0:68:59:74:c2:92:c6:d0:7d:9a:28:30:e2:b6:79:
82:3b:ce:99:77:29:cf:02:40:a8:ad:8e:50:8f:29:a6:64:48:
33:8e:c2:ea:db:b0:e1:f8:29:94:4d:1b:47:46:64:c2:3f:b7:
3a:b8:cb:6e:54:d9:44:24:1a:f7:65:7c:11:1b:ce:ad:2d:27:
c8:e2:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:52 2025 by rpki-client