Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: Mbw8UJNt9fuuJXj/3i6Rj9OeiAJ/h2f5tT4l+5ZtQP4=
Subject key identifier: 83:0D:83:AF:FB:C1:71:10:C2:71:96:74:48:79:86:B1:D1:49:80:34
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 01988166B46CD171051F9D5AB7CE52A89B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 13C3
Signing time: Wed 06 Aug 2025 22:00:48 +0000
Manifest this update: Wed 06 Aug 2025 22:00:48 +0000
Manifest next update: Thu 07 Aug 2025 22:00:48 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: iaKXhm2aFy2RWPH2WRMQjL2dk+OTbtlojheVT/fSXIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:b4:6c:d1:71:05:1f:9d:5a:b7:ce:52:a8:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Aug 6 22:00:48 2025 GMT
Not After : Aug 7 22:00:48 2025 GMT
Subject: CN=830d83affbc17110c2719674487986b1d1498034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:50:0b:f3:76:2e:d3:c1:f0:eb:d2:e4:fc:
eb:e5:00:c4:2b:80:c4:de:a3:9c:e2:0c:70:92:cd:
3d:02:14:95:66:01:b6:8c:73:48:bd:51:39:1a:ab:
45:96:93:59:fe:5f:72:c0:d1:ca:f9:97:7b:79:d0:
7a:a0:3b:9d:a2:7d:18:27:07:e8:8b:79:23:34:e3:
35:b8:77:3d:06:86:62:b9:3b:9b:8f:ef:aa:31:d1:
95:2f:c7:e1:43:3a:e9:98:b4:b3:57:ae:9f:c8:2c:
1d:1c:01:4e:b3:29:cb:89:1e:94:18:71:ba:07:30:
51:10:41:f2:ca:8f:fb:81:ce:5e:64:00:d8:cb:df:
30:60:d6:ad:b4:74:2a:cd:41:85:b3:ff:e1:de:6c:
0f:63:bf:06:40:4b:48:96:93:b2:79:17:5a:e1:6d:
a7:a2:de:8a:cc:a8:eb:f5:1e:c4:93:5a:f4:bd:8e:
e0:cd:5e:b9:48:17:33:05:6e:71:fa:2e:a3:43:a2:
f8:69:e1:90:1e:93:5f:38:e9:54:b7:6f:31:6a:d6:
d5:45:7d:b7:bf:da:db:51:57:af:34:a2:63:52:d7:
a6:b4:8e:a8:6e:75:3b:74:ad:80:f5:95:7b:d8:21:
96:14:ce:be:9f:5b:68:9f:a3:89:cc:16:c6:be:a8:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:83:AF:FB:C1:71:10:C2:71:96:74:48:79:86:B1:D1:49:80:34
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:1d:69:64:8b:bb:64:d7:0b:71:c9:47:fa:5d:0a:cb:77:
83:05:43:55:34:4a:ff:70:c7:35:4c:d7:74:cc:57:18:14:26:
73:c8:f2:42:ab:ef:c9:1b:02:e7:aa:25:7e:d9:77:ee:63:0a:
70:fe:4a:0c:4e:3a:b1:d9:9e:32:de:a0:37:6d:47:bf:8b:d0:
1a:b2:65:c4:23:e0:d3:81:67:23:12:42:4b:dd:17:36:a9:7c:
1d:09:7b:28:61:b6:85:93:82:13:0c:25:a6:d3:2f:21:9c:06:
6d:c6:73:54:5c:3e:7b:b8:bc:d4:1d:4d:25:76:ba:42:e9:2c:
cf:70:9d:66:2a:76:1c:63:90:8b:35:af:49:5f:05:98:f2:1c:
05:08:df:01:69:ac:a3:df:50:fe:02:63:e5:dd:ea:52:02:80:
d3:4b:ae:ca:09:94:d7:c4:11:08:78:b9:e1:fa:94:15:37:07:
5b:09:7c:59:3c:21:0d:22:5e:69:bc:b6:7f:0f:78:54:30:41:
b8:16:5b:92:8b:3b:3e:9b:7b:c3:4a:3f:66:dc:13:fe:21:e5:
04:f4:34:f5:04:30:1d:2f:07:e9:46:8c:9e:2b:0b:3e:91:2a:
46:17:75:50:1e:28:e2:92:d1:80:c2:d1:3a:ff:cc:26:1d:a3:
3c:11:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:44 2025 by rpki-client