Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
File: OOdr5zhCITzgy8kz0aN0g1fyKD8.mft (raw, json)
Hash identifier: CUjnFmxPh32vX6cXOSrSTLOsiovRid0LaqtWHmIoEG4=
Subject key identifier: FD:BA:1A:0D:79:74:74:72:CC:36:13:D0:C1:D4:20:4C:F9:16:E4:7A
Authority key identifier: 38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
Certificate issuer: /CN=38e76be73842213ce0cbc933d1a3748357f2283f
Certificate serial: 0198A203F7A11C507D69F6E456D802332FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
Manifest number: 4A
Signing time: Wed 13 Aug 2025 06:00:25 +0000
Manifest this update: Wed 13 Aug 2025 06:00:25 +0000
Manifest next update: Thu 14 Aug 2025 06:00:25 +0000
Files and hashes: 1: OOdr5zhCITzgy8kz0aN0g1fyKD8.crl (hash: FbyJF+nijcBX7oPpw3/nvPgIfhKS5OECCjZQiXYqmfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:03:f7:a1:1c:50:7d:69:f6:e4:56:d8:02:33:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e76be73842213ce0cbc933d1a3748357f2283f
Validity
Not Before: Aug 13 06:00:25 2025 GMT
Not After : Aug 14 06:00:25 2025 GMT
Subject: CN=fdba1a0d79747472cc3613d0c1d4204cf916e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:f0:62:8c:73:99:98:0e:f4:82:ec:03:89:
e8:fc:6d:fa:a3:68:a4:5c:26:8b:32:34:4a:54:e1:
b4:ac:29:03:f2:a8:8f:89:2b:60:0d:a6:af:77:ed:
92:c0:c4:72:0f:fe:5f:46:6f:51:4f:bf:e0:07:f2:
99:f8:7f:a5:94:3e:a4:47:55:ac:80:48:91:14:55:
e2:b7:7c:97:db:a2:6f:db:de:10:c8:0c:ab:ad:96:
15:eb:31:30:a4:6c:01:f0:f8:a4:74:0c:e8:ba:05:
f3:b3:7b:aa:a1:34:1a:ec:86:86:54:c6:90:93:ac:
f4:29:76:3c:63:69:78:77:16:f0:f7:9c:90:3c:dd:
58:3d:5b:5a:eb:14:49:3f:09:66:fe:3d:ea:85:34:
dc:a9:ae:b7:ad:d2:66:f2:a8:11:c5:a2:77:c3:57:
f6:b1:b8:54:e2:ad:1e:96:3d:8d:5f:39:19:e1:86:
0d:a9:02:58:61:9a:d8:91:74:5e:02:44:48:81:89:
3b:32:de:16:1a:32:ea:1d:71:36:62:ee:c8:02:19:
36:cf:0d:88:cd:35:6b:15:2f:b3:ea:7b:cb:e2:2e:
de:ab:ba:4f:cd:2e:11:43:14:08:2e:c7:e8:fe:5c:
7c:c1:5e:86:41:55:c4:f9:24:1d:9a:6a:79:eb:e0:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:1A:0D:79:74:74:72:CC:36:13:D0:C1:D4:20:4C:F9:16:E4:7A
X509v3 Authority Key Identifier:
keyid:38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:e0:3c:c2:c6:6c:48:9e:f1:0d:57:dc:2c:20:32:07:af:
f4:17:33:a8:50:c5:b3:76:77:37:89:f6:9a:3b:44:72:60:b0:
3e:2d:cd:f6:62:79:48:0c:b5:64:e7:bf:80:69:a2:44:52:6b:
48:36:9d:34:12:01:22:fd:f3:39:0b:db:77:48:da:55:6b:36:
bb:e6:20:e8:0c:b2:e2:e2:54:73:df:08:cc:86:76:a0:8f:47:
27:04:6e:9f:d7:56:65:ba:85:95:a7:75:81:15:01:31:13:97:
c0:02:4b:ff:13:86:34:b3:3e:cf:35:32:27:b4:82:b1:36:19:
f6:95:b1:e5:b0:be:9c:e0:bb:e3:ec:58:34:4a:99:b4:16:c7:
ce:14:19:2a:eb:5f:36:fd:9a:a2:7d:0f:a5:e3:64:10:92:3f:
9d:3d:00:f8:30:08:7a:fd:b6:40:ce:c9:ae:50:52:63:af:a6:
cc:87:a6:8f:37:05:9d:8f:f6:86:ae:e2:6e:39:c1:80:a3:59:
69:3a:00:d4:3d:93:5d:e7:51:c2:e7:90:b6:77:b5:05:ba:56:
3e:a2:30:74:a1:77:8d:f1:61:d6:00:52:ca:6b:93:01:39:89:
6b:55:dc:40:03:f1:3f:57:d5:d3:13:89:83:66:db:41:68:4c:
f3:79:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:44:51 2025 by rpki-client