Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: 4VXth6zYpDUA7tdMrBUTb/eKs/F1RwTiSUP1sn6YsCQ=
Subject key identifier: 79:BC:E3:B8:26:9E:F8:77:B9:60:79:D4:23:4D:9A:3E:CA:6F:5A:B8
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 01988921800102E6A452FD36AEF3A5FA1A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 110F
Signing time: Fri 08 Aug 2025 10:02:10 +0000
Manifest this update: Fri 08 Aug 2025 10:02:10 +0000
Manifest next update: Sat 09 Aug 2025 10:02:10 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: HTJ7tYyKIWjdBpefbpnjylPnl31yGJPfAsucYeTXJko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:80:01:02:e6:a4:52:fd:36:ae:f3:a5:fa:1a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Aug 8 10:02:10 2025 GMT
Not After : Aug 9 10:02:10 2025 GMT
Subject: CN=79bce3b8269ef877b96079d4234d9a3eca6f5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:af:f2:73:10:97:5b:9d:6d:ec:d2:9e:6d:
bc:56:dc:bc:55:4e:90:36:12:2f:e1:b7:72:66:aa:
60:64:c3:98:0f:f8:a8:76:8b:b9:16:17:78:a4:bb:
e3:19:80:0c:e6:fa:a4:7d:76:e6:23:08:c1:e5:73:
e4:a7:49:90:d4:cc:93:d5:f2:ec:31:37:11:a4:23:
5c:1a:80:4a:8c:45:ef:6f:01:e0:cd:4e:ef:30:36:
0c:9f:06:14:6b:f1:70:d2:e3:df:17:ad:ee:63:3b:
4a:f9:96:22:46:27:e6:2e:6b:57:0e:94:76:7f:11:
49:9e:0b:73:ce:e1:3e:03:b8:95:e2:1a:4f:e8:dc:
15:0f:2c:88:a1:9f:98:36:4e:1d:51:e8:74:51:67:
67:97:66:c7:5a:6f:53:b8:ba:9a:1d:ef:b5:78:5f:
4b:23:b4:d1:5f:30:c1:0a:00:c6:a3:d6:45:8d:e7:
a2:97:5b:80:3f:d1:0c:8c:04:64:52:6a:76:3e:95:
eb:85:a6:44:18:f9:10:ec:ab:6e:67:3e:3d:79:4d:
d2:94:6c:ee:47:4c:67:9c:17:ed:6d:03:77:96:08:
3e:6a:21:15:89:e0:5f:68:6e:14:52:d3:61:28:a4:
58:20:60:80:55:d8:70:64:27:2a:e0:20:6e:78:09:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:E3:B8:26:9E:F8:77:B9:60:79:D4:23:4D:9A:3E:CA:6F:5A:B8
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ea:31:25:65:41:51:81:0f:c9:25:f4:b0:a8:e3:bb:b6:2e:
fd:39:ff:06:a4:dc:fd:f8:dc:f7:0f:b9:18:70:3c:80:99:f7:
41:33:93:70:c0:2c:9c:ca:68:fa:a5:21:cf:a4:be:f0:ee:11:
eb:1e:02:de:e0:2a:33:10:a7:a9:e1:1a:37:01:36:e2:58:7a:
ed:79:44:c3:46:38:23:38:57:3d:63:da:c6:5f:72:a3:e8:d9:
da:72:ff:8d:fb:f3:64:f3:07:d7:a4:5e:24:fa:c4:d9:e9:33:
8d:ef:0e:90:ed:92:72:03:f5:b5:69:b7:a6:23:78:22:85:c6:
f6:5a:34:78:6d:45:24:98:40:27:0f:95:b6:34:cd:f2:a6:34:
d6:f8:49:c7:56:74:cb:8d:84:4b:fa:4e:75:b9:f3:cb:13:f0:
c8:9d:97:4d:c3:f0:cf:13:d3:9b:16:eb:e8:fe:61:a7:54:3a:
40:1f:8f:5e:2e:bd:4f:ae:d2:48:01:08:78:f1:be:7d:b7:ab:
53:d8:86:00:79:3d:56:bb:7d:db:c1:71:ed:99:a1:e6:cf:8e:
dc:ff:5b:08:ed:c0:df:c8:29:d2:43:51:77:93:bd:31:ca:bc:
f7:0e:a5:06:53:6e:8f:c3:67:25:17:b5:ca:0a:c9:0a:5d:13:
db:72:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:19 2025 by rpki-client