
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: kD56Ylh0NyGmCuoIyaHNes5FFXxyU6T93gRfqYib/R8=
Subject key identifier: 46:4F:09:AB:43:55:15:DE:76:18:A9:96:63:89:40:C4:63:72:65:C8
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 01988B106ACB8C6D91099D4937233F12CED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 09E2
Signing time: Fri 08 Aug 2025 19:02:45 +0000
Manifest this update: Fri 08 Aug 2025 19:02:45 +0000
Manifest next update: Sat 09 Aug 2025 19:02:45 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: VYpFuMxXPrgrcq7qHMc8CI17PYZH7+LpF4VtE+tQmMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:6a:cb:8c:6d:91:09:9d:49:37:23:3f:12:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Aug 8 19:02:45 2025 GMT
Not After : Aug 9 19:02:45 2025 GMT
Subject: CN=464f09ab435515de7618a996638940c4637265c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:e8:f7:cc:3e:5e:42:1c:83:31:a7:8a:58:
11:9e:c9:d1:67:7a:6a:84:eb:77:29:17:62:8e:90:
0a:65:02:7c:74:07:dd:52:3d:bf:3e:87:8b:93:34:
20:db:a9:08:33:fe:24:ce:2b:2a:cc:41:8f:0c:99:
99:d4:8b:43:13:46:ac:b3:11:6e:72:f3:26:67:06:
ea:db:97:a7:60:64:bb:b8:22:f0:12:a4:cd:fd:67:
03:0d:6a:da:b6:a5:a9:d0:4e:97:57:23:b6:4b:2e:
3d:48:3d:e3:c1:11:1d:9c:48:0f:55:fd:d8:06:a6:
3d:68:e4:e7:5d:b9:5f:25:28:27:06:02:99:d2:cd:
9a:47:9d:4f:48:5a:7e:a4:c4:bd:54:60:4f:8e:43:
d5:f8:4c:db:1a:83:4a:d7:6f:b9:ff:ef:5e:b9:36:
0e:ac:df:1f:52:6b:e0:69:82:46:23:c5:25:5a:e6:
52:0a:51:8a:99:fe:33:6a:0d:c4:5f:d3:bb:5d:af:
fe:36:87:f1:6a:ec:06:ca:40:42:3c:76:f9:68:28:
55:e7:0f:00:22:ce:11:db:39:29:68:7b:0d:5f:55:
33:e6:54:7b:aa:f9:30:38:41:34:fc:38:9c:50:25:
ff:c5:03:15:6b:2c:40:aa:69:93:f3:4e:45:2c:38:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:09:AB:43:55:15:DE:76:18:A9:96:63:89:40:C4:63:72:65:C8
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:26:3d:3a:96:be:d2:4c:4e:9e:62:9e:70:36:25:11:87:
d7:7c:be:f1:2d:7e:f3:bd:d4:95:ec:97:87:69:55:18:a2:21:
65:14:de:1a:2b:28:8e:38:32:d0:04:26:39:d9:2f:40:c8:f7:
80:af:3a:29:a5:fc:8d:d0:0f:22:5b:bb:8d:04:d0:8c:df:57:
1e:dc:90:31:2b:e0:83:71:eb:45:20:15:29:6c:e0:02:3c:8f:
50:c6:ec:48:81:dc:c6:a3:3c:84:50:89:17:b4:7a:de:7a:3c:
4c:5b:b4:5e:6e:7c:6d:80:8c:67:06:cb:a8:3e:b0:63:de:84:
43:4b:44:e2:fc:27:59:00:60:42:d4:f1:ca:cf:eb:8f:a2:7e:
f9:fd:cb:21:9a:c4:c8:03:2a:62:ec:16:82:18:ad:e0:a9:54:
c4:5b:5d:17:bf:44:ba:e8:de:58:72:47:ec:b9:64:d6:e6:22:
91:22:3a:96:a6:8d:8d:bb:d1:ba:f7:00:f1:64:9a:36:85:89:
30:b5:57:ed:ab:71:07:6d:e4:ad:cd:cb:ef:66:74:ba:3f:68:
07:0a:6a:40:55:3a:5e:00:77:07:4c:ba:fa:ad:03:33:8d:d9:
9d:b1:6b:a7:5b:55:d9:05:57:f0:ac:38:91:82:be:9b:aa:bf:
9a:fa:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:50 2025 by rpki-client