Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: UtdmGksmfsRglBFQ+Sr4/rSWvcVO88jliR3PX5VwEIo=
Subject key identifier: 2C:17:AA:32:0E:8F:C5:E1:2E:CD:36:A5:58:14:EC:99:89:A0:78:49
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 01987DF85299FE5884F7BDA097580785184C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 0DC7
Signing time: Wed 06 Aug 2025 06:01:22 +0000
Manifest this update: Wed 06 Aug 2025 06:01:22 +0000
Manifest next update: Thu 07 Aug 2025 06:01:22 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: c1VFVHsy86DEezgLIVsm9V9zooQxNxwls/DOOi6RBGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:52:99:fe:58:84:f7:bd:a0:97:58:07:85:18:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Aug 6 06:01:22 2025 GMT
Not After : Aug 7 06:01:22 2025 GMT
Subject: CN=2c17aa320e8fc5e12ecd36a55814ec9989a07849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:fd:96:df:cb:d3:83:e0:57:7f:45:59:ef:
85:9d:cb:f9:fc:d1:12:1a:15:4a:27:0c:19:bd:87:
98:e4:99:f1:4e:62:bd:77:11:7f:20:d1:87:32:d9:
28:84:74:40:2d:e4:c8:3a:3c:e4:0d:31:88:ca:93:
41:31:5b:22:5d:06:be:9f:41:02:71:ad:57:72:d1:
e4:fb:6c:77:29:f0:7e:f9:9a:2b:b6:d3:dd:df:40:
41:41:09:f8:96:0d:8f:9f:6d:65:7f:98:8e:b9:b0:
3c:e6:5a:92:67:79:55:0b:a7:64:08:46:28:02:39:
bd:54:32:6e:40:f6:ae:58:0b:ed:f4:17:40:62:97:
8e:8c:b4:69:78:c0:2f:6a:cd:a9:3e:13:ad:70:01:
d6:56:2f:1b:4e:16:05:ed:e1:dd:9a:bc:8b:52:af:
62:88:1c:39:61:39:ee:3b:39:ac:3e:7e:5b:4f:fc:
86:13:92:fb:5c:18:f6:81:4f:f6:e4:77:0e:73:3a:
69:80:b3:58:9f:bd:9c:d4:07:e3:8f:b7:c8:2e:b3:
a5:9e:91:0e:20:a0:e5:fe:9e:6d:15:5f:ed:d3:65:
2a:02:c2:94:e8:b7:3c:a8:42:2c:6f:2d:7b:ba:3c:
d9:d1:76:9d:d8:cd:88:3a:da:2e:5d:1b:b5:0a:68:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:AA:32:0E:8F:C5:E1:2E:CD:36:A5:58:14:EC:99:89:A0:78:49
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:aa:78:07:e0:d1:05:35:6b:60:3d:f3:6d:54:1c:77:2b:
a0:07:21:9e:99:d5:d3:5c:21:73:f4:34:0c:6d:de:38:10:20:
84:ea:5c:67:ee:38:04:c9:54:4e:6f:85:83:4e:ed:94:6d:a5:
11:77:5c:75:15:bb:c8:70:04:3a:c3:e8:f5:ca:ce:e6:05:3c:
32:53:40:5e:bd:ab:dd:ed:0a:37:63:79:4a:06:62:9f:04:77:
0a:bc:13:76:71:f6:6d:25:9b:04:31:c4:de:2c:6e:91:25:01:
03:56:3f:35:08:39:51:a5:c1:75:6f:33:7e:4b:c7:22:30:33:
b8:61:5b:8c:bf:96:ba:4c:ec:fa:44:60:75:ed:1a:6a:cf:1c:
fa:10:00:e3:16:67:51:d8:dd:dd:35:36:13:da:93:9d:88:12:
14:12:cc:bf:5f:ec:df:48:0c:b2:93:c7:06:a5:45:22:89:2b:
64:9d:46:c2:8e:ba:a2:e6:c3:02:82:cf:af:75:59:5d:ee:0f:
1e:a7:e4:18:cd:6b:1d:21:4c:ce:26:d5:bd:20:ad:34:1a:32:
38:7d:b4:51:74:4e:b6:27:ce:a8:1b:1f:64:c2:69:e1:35:78:
0c:14:c8:c5:6d:5c:2d:06:33:97:3f:25:a3:73:71:8d:6a:d2:
81:58:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:11 2025 by rpki-client