Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: coJkqoDFJd72koQe7+pAd0XgfBKqw4x7D9YpVnsK+s4=
Subject key identifier: 8F:61:AF:14:04:43:13:CD:D2:05:0A:9D:BD:F7:16:1A:24:96:28:64
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0198A04E6DA55B86ABC9BBC37C285DEFE02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0EC8
Signing time: Tue 12 Aug 2025 22:02:31 +0000
Manifest this update: Tue 12 Aug 2025 22:02:31 +0000
Manifest next update: Wed 13 Aug 2025 22:02:31 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: x213+D8pMZ87r0lE0RHqy0LOO4QDTveW0WTtcoiP6eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:6d:a5:5b:86:ab:c9:bb:c3:7c:28:5d:ef:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Aug 12 22:02:31 2025 GMT
Not After : Aug 13 22:02:31 2025 GMT
Subject: CN=8f61af14044313cdd2050a9dbdf7161a24962864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:1f:30:53:78:cc:25:e5:7e:f9:53:e6:19:
18:30:67:b8:ee:8c:b4:5e:6f:9d:2f:49:bd:42:57:
5c:46:5d:92:52:76:5d:4b:4b:c4:00:bc:58:44:06:
b2:b6:97:df:b4:e9:3c:a8:0c:4c:6d:2c:a8:53:2f:
2b:f1:af:b9:69:9e:d7:98:26:ba:eb:5c:55:5a:3c:
78:8b:0d:97:76:70:a4:09:35:83:0f:35:f9:f5:ac:
0c:04:7b:cc:04:0c:ba:fd:13:9f:0f:0d:4e:08:b5:
1e:38:02:ba:f8:9a:60:fe:65:07:bd:8f:e0:94:37:
ee:00:a8:b1:c2:34:d1:7e:d1:d2:47:99:42:e5:1f:
27:32:9a:71:e9:db:45:ff:96:d3:a2:85:76:b2:81:
03:70:11:40:23:de:07:70:eb:07:c7:06:35:0c:41:
4d:08:64:d1:18:54:c3:1a:14:c6:27:22:2f:69:94:
d5:72:38:71:79:3a:44:90:25:4e:51:86:b3:a2:63:
d2:c8:ea:1e:71:34:55:e4:ee:c7:dc:81:02:6c:ea:
50:28:44:07:f3:b7:4b:0e:8f:9a:8d:c3:98:1d:a9:
eb:32:93:66:94:23:48:51:b0:ea:b1:4b:7f:3a:4d:
d3:ae:2d:83:26:a9:37:c4:fc:9d:7a:4d:8a:3e:4e:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:AF:14:04:43:13:CD:D2:05:0A:9D:BD:F7:16:1A:24:96:28:64
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1a:6f:b0:fa:e9:cd:03:17:c1:45:f6:1b:38:8b:fc:b4:29:
54:27:32:d1:b1:7a:f3:c4:96:8e:31:ae:3e:c9:21:15:b4:67:
0c:d7:8e:b9:1a:b5:17:42:01:67:86:57:6a:c1:23:85:f0:75:
23:a1:43:bd:74:5e:d8:9a:4a:1f:e2:ae:f1:4c:bd:7f:f1:b5:
d5:54:73:70:d1:3f:f5:ab:7d:27:46:e3:b0:02:c2:6c:d5:f3:
82:bf:84:af:7f:09:30:36:18:fd:b1:14:66:dd:61:11:bb:e4:
8a:35:0b:23:f2:e0:f6:a1:91:b8:dd:00:65:39:99:c0:7c:3e:
9c:3c:13:da:8a:0b:c0:3a:31:b4:45:08:9d:ff:ad:69:82:ef:
d3:6d:86:33:5f:8d:ad:a4:fe:e9:d8:f4:37:95:2e:f5:4e:6e:
a3:a0:05:bb:50:cc:6e:8b:23:6c:77:f3:ab:a2:64:36:40:22:
82:cf:6b:3d:13:f6:f7:9d:ec:d1:4a:c9:4e:83:8a:6f:8d:21:
e0:0a:26:9a:32:f5:9f:20:ec:27:91:9a:ff:c4:cf:8a:d9:ae:
53:06:8a:6b:d7:b0:b2:3c:67:42:22:cd:94:c6:a2:e5:ba:ce:
5c:11:1d:51:e1:ad:95:bf:43:7a:cd:7a:c3:f3:1e:bc:08:32:
ec:82:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:36:01 2025 by rpki-client