Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: 2aXsKMQx1c73Shn4A07cffTlcUmYz80HKDtdGoVjBu4=
Subject key identifier: 45:0B:41:59:9A:24:33:B6:24:54:03:82:B7:7F:AB:BF:58:F6:70:46
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 01989335DF8CA5CEF0911E2D19BAEAD17548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 09:00:37 +0000
Manifest this update: Sun 10 Aug 2025 09:00:37 +0000
Manifest next update: Mon 11 Aug 2025 09:00:37 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: wriPQSPPHRhnwjJWc5+fpCz5zQktIo5luUfvuZOHYCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:df:8c:a5:ce:f0:91:1e:2d:19:ba:ea:d1:75:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Aug 10 09:00:37 2025 GMT
Not After : Aug 11 09:00:37 2025 GMT
Subject: CN=450b41599a2433b624540382b77fabbf58f67046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:67:5b:56:4e:01:72:d1:3b:03:36:8e:9d:
b9:de:27:e0:6d:a3:44:53:40:76:b8:89:8d:70:42:
67:67:0f:7d:67:df:07:f4:e3:15:ce:f4:32:4c:e6:
82:a4:09:13:eb:5f:e4:46:cc:e3:89:fc:e1:68:4a:
48:d4:af:12:2d:b8:69:9b:39:90:5b:05:4d:99:64:
1e:f9:3d:ea:84:9e:13:06:36:29:46:8b:a8:d5:18:
0b:11:41:7a:bb:90:d9:9c:d2:29:0f:ff:34:58:de:
38:c0:4d:34:ca:83:f6:d6:c1:50:73:59:be:b3:a3:
58:d1:02:e6:99:ec:05:ba:13:6a:90:d5:4c:a6:27:
f1:bf:a2:0d:d3:ee:2c:0a:36:e4:f4:bb:d3:c5:8f:
d3:78:84:04:3d:1e:a0:a3:ca:fa:12:ab:2b:53:ff:
a5:5c:af:20:55:a3:e7:0e:69:7e:83:e8:e3:02:d2:
7a:b7:8c:83:b7:2a:59:f8:0f:fc:3e:dd:83:c5:82:
6e:a5:91:de:00:e4:78:7b:bd:41:d1:3a:ab:3f:87:
90:e4:a3:a9:8a:0d:ac:e5:99:5a:05:7d:68:7e:e1:
8f:f0:1c:b0:ab:ae:c5:39:1a:c9:c2:a2:9a:3c:8d:
df:28:f4:81:4e:2c:65:14:8b:ef:df:1e:3f:09:b1:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:41:59:9A:24:33:B6:24:54:03:82:B7:7F:AB:BF:58:F6:70:46
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:01:e5:cf:55:34:d7:fc:b0:71:68:02:ec:ba:28:46:c4:
9c:bb:aa:95:48:d9:7d:9c:d0:15:50:b7:e2:34:ec:b0:3f:0c:
d2:bf:f8:b7:b9:69:9a:3a:08:d6:12:32:6e:99:95:4d:68:79:
cf:8a:60:91:fb:5c:9c:92:3b:9e:af:08:68:08:6b:d5:7f:9f:
66:1c:e3:9c:9d:40:5a:93:c6:60:a0:36:5d:1e:40:1d:eb:7a:
bb:dc:da:f4:72:53:ab:ef:90:92:3f:9b:a1:29:b9:fc:57:0a:
2f:a3:0c:81:cf:f3:9a:fb:ac:9b:8d:c4:b3:26:39:b6:b5:ae:
93:d5:f2:87:18:01:95:c3:01:bb:36:62:b4:eb:c9:a6:72:a2:
16:da:f8:a8:47:22:de:9e:b0:5e:09:d3:15:55:69:3e:25:22:
48:4a:a9:79:c7:51:f8:1e:26:d1:10:fd:60:fe:41:14:c2:ad:
e5:a8:1a:67:f2:de:2e:ef:c9:42:d3:d3:cf:45:4f:ac:ea:ca:
d9:6f:8c:64:0f:80:14:30:12:a2:fa:b0:38:0f:98:46:2b:0b:
71:95:07:36:2d:e0:aa:03:d4:e6:7d:c5:9d:81:29:58:a1:41:
61:bc:b0:0d:c5:1e:5a:f2:fd:fd:a4:33:c3:60:a5:14:68:d2:
92:74:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:12 2025 by rpki-client