Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json)
Hash identifier: cJY3wmAYYvHOK3vlZ9BvHCR7+K4Ki6BJtmdudp/Tb1s=
Subject key identifier: 05:BE:CF:19:E5:A4:F4:1F:EC:E8:7A:24:D9:5D:50:7F:A2:C1:59:13
Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Certificate serial: 01989147907642EFFC2DA2DBD52D32209392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
Manifest number: 0B2C
Signing time: Sun 10 Aug 2025 00:00:42 +0000
Manifest this update: Sun 10 Aug 2025 00:00:42 +0000
Manifest next update: Mon 11 Aug 2025 00:00:42 +0000
Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: LSaJwpA78kxi854lcJSN/R4JtQ3ftCDvopQZjZ2w+tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:90:76:42:ef:fc:2d:a2:db:d5:2d:32:20:93:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Validity
Not Before: Aug 10 00:00:42 2025 GMT
Not After : Aug 11 00:00:42 2025 GMT
Subject: CN=05becf19e5a4f41fece87a24d95d507fa2c15913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:a1:87:06:0d:76:11:28:4f:43:66:ce:49:
9c:db:dd:cf:06:8c:96:26:66:61:07:3c:b2:43:c8:
d8:e7:bd:0a:8a:6c:b1:49:27:c6:bb:6e:21:ff:d5:
dd:f8:ae:3a:9f:c7:98:0d:10:82:84:94:95:cb:5d:
68:5f:81:da:64:e1:1e:f7:0e:d0:2b:2a:57:2b:6a:
e3:97:99:bc:08:0f:f8:4e:3c:df:59:92:6a:f7:a9:
e3:29:68:09:1c:a1:ff:8c:be:ee:98:63:24:5c:b0:
a2:19:b2:4e:2f:7a:0c:2f:01:d7:27:82:2d:8c:ce:
4d:08:47:22:a3:ef:bb:e8:df:72:17:a8:ac:81:62:
d1:e8:8e:11:ae:cd:7e:21:09:4c:87:59:08:35:47:
54:47:cd:ef:05:3b:6f:41:02:8f:bf:c9:6d:f6:31:
76:27:74:fe:e6:93:6e:23:19:8c:87:81:47:4e:ad:
f7:f7:6d:de:8e:18:11:73:75:00:d6:dd:1c:6a:eb:
31:8a:56:3d:51:7a:2d:50:0b:5d:67:32:1b:71:f6:
71:44:6f:51:82:fd:cf:0d:06:66:31:71:b5:17:73:
0c:1b:67:ba:da:25:66:b4:ad:64:d8:8e:ab:32:d7:
1a:9b:81:54:25:0f:9a:76:41:ba:8e:4a:56:0c:e2:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:CF:19:E5:A4:F4:1F:EC:E8:7A:24:D9:5D:50:7F:A2:C1:59:13
X509v3 Authority Key Identifier:
keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:41:51:8d:10:cb:91:4c:00:2d:a5:cd:e0:78:c0:cf:c2:
a3:3c:e4:6e:40:1c:67:2b:77:bf:25:0c:dc:37:ca:e0:7d:84:
f8:54:bc:e0:7b:6f:05:23:40:01:81:8c:b1:9d:da:fe:86:23:
46:8d:7f:63:16:a5:47:f1:e8:be:89:b7:9f:5e:9b:78:1a:73:
90:bf:a0:28:ec:85:e3:8a:d3:7f:aa:f2:e7:c8:4a:16:4d:3b:
0e:79:26:57:e5:74:33:e6:8c:6b:fa:f7:bd:d4:a3:4a:d5:7d:
06:cb:91:fe:c3:44:76:67:c6:67:8b:e3:fe:73:bf:96:ce:7f:
d4:32:58:af:02:a6:00:0d:37:b2:a9:b0:45:db:48:62:0b:c0:
76:10:9a:1b:78:6c:e1:55:07:72:b2:dd:fd:fa:7d:8e:da:2a:
b9:e1:f0:da:59:eb:af:23:e4:44:aa:07:e3:5d:8f:cd:10:01:
f1:44:f9:13:ac:c1:02:be:d5:02:06:9d:9c:9f:7f:e1:ef:e3:
53:98:09:b4:05:c9:3c:08:aa:1f:e4:e9:5b:33:85:98:7c:9b:
d4:84:16:b8:7c:58:a9:ae:f1:11:09:93:4e:df:b9:90:48:2e:
c4:a3:ec:8b:67:5f:3f:cc:f4:d2:a2:04:fa:aa:6f:28:36:2c:
1e:43:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:36:09 2025 by rpki-client