Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: 6J6BGOk+SlhW0gf86niqZwosuvEJb0rWDabfW6NuDc4=
Subject key identifier: 49:60:25:B2:D1:BB:07:67:A2:98:A4:78:15:1F:8F:25:85:20:D0:E0
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 0198745038F3632AC6E5B6952B473A651356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0C90
Signing time: Mon 04 Aug 2025 09:01:11 +0000
Manifest this update: Mon 04 Aug 2025 09:01:11 +0000
Manifest next update: Tue 05 Aug 2025 09:01:11 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: dcGhnkOP0zmgo7gl2LRy8qZsIssmZTnM5d6yoOjlC/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:38:f3:63:2a:c6:e5:b6:95:2b:47:3a:65:13:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Aug 4 09:01:11 2025 GMT
Not After : Aug 5 09:01:11 2025 GMT
Subject: CN=496025b2d1bb0767a298a478151f8f258520d0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:5d:c1:71:59:a6:ab:b4:a4:6c:75:c3:be:
21:5b:fb:36:2c:88:f2:b9:87:34:42:18:bc:66:34:
dd:7b:b8:17:f6:93:89:9f:50:79:c6:d0:c2:74:bd:
00:2c:d8:73:27:a3:5d:86:cc:aa:dd:52:c4:c6:4c:
ce:e6:3a:b7:40:e6:7b:00:86:9b:cd:26:e0:4a:09:
d8:1c:55:cd:20:5e:6f:6b:dd:d2:d4:97:5f:83:dc:
8f:44:5b:27:44:c2:45:81:b9:ef:fc:21:de:ee:d2:
2e:15:b9:94:14:f4:b6:b1:27:b0:f8:63:09:49:68:
2f:a8:fc:aa:ae:27:a2:19:be:a5:4a:10:86:af:55:
70:e5:30:c1:04:fb:09:1f:42:dd:43:31:82:90:ea:
45:b4:0b:0b:a2:a5:7e:c8:f6:f2:8d:b3:0c:f1:93:
cf:a3:5e:e7:ed:70:c6:07:b7:37:5d:e8:0d:ce:25:
a2:e2:a2:06:8a:9a:82:17:46:9a:a7:06:df:1d:a0:
df:8b:d8:9b:91:f3:99:d3:30:17:9b:84:da:5e:8d:
37:b4:5d:1f:aa:5d:cf:02:ca:61:30:f9:55:b3:b0:
b6:e5:99:f6:ae:5e:83:a6:0c:76:ec:97:f7:89:03:
9f:b8:f9:45:22:33:0f:f1:1e:62:d1:5b:e8:1c:5d:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:60:25:B2:D1:BB:07:67:A2:98:A4:78:15:1F:8F:25:85:20:D0:E0
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b2:39:c1:92:73:32:7c:2f:94:72:ad:e2:d6:40:a1:a4:7c:
39:29:cf:c1:34:9b:de:c9:e7:d5:1a:ec:8f:49:77:ea:72:67:
a6:6e:67:bc:c6:c3:08:51:d7:86:4f:9b:f0:d3:4b:33:8f:88:
30:65:ae:1a:7a:ce:e7:a4:b6:01:55:21:74:1c:70:53:b4:ad:
15:e2:78:38:8b:80:de:ee:a1:e0:97:a3:93:c2:11:78:c1:b8:
e2:00:db:23:ba:75:22:25:cb:c0:2f:19:21:65:37:ac:55:56:
bf:87:09:76:7a:41:db:b9:89:91:e2:ed:1a:81:7b:cd:58:7d:
4f:49:bf:43:b3:72:c7:2f:76:ff:82:c6:03:00:54:e6:9e:bf:
02:bc:90:3e:05:9b:19:fd:5e:48:c7:19:91:10:f9:29:63:1b:
98:a7:e4:a8:ba:97:14:f3:06:b5:aa:98:d2:8c:e9:e4:2e:94:
64:6d:ec:4c:71:82:67:ca:92:ef:af:20:e3:ce:60:72:8a:78:
a7:cf:be:1f:e6:4f:37:81:3f:9d:04:1d:5a:3b:d9:f3:ad:a5:
c7:12:81:e9:41:07:08:12:5c:57:7a:e7:1e:ba:be:3e:c7:82:
62:d2:43:03:3d:c4:75:14:ba:7e:91:91:f0:e5:a8:a8:3d:55:
69:b1:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:38 2025 by rpki-client