Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File: OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier: pC8ORE1uMzHfz6O96PpicBPaDik8EBx5MdAAgmX3IQo=
Subject key identifier: B0:E5:67:1D:9B:54:8A:2A:55:F3:CC:C5:4D:FB:53:6B:56:D7:07:26
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer: /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial: 019892CA293A9345CDC2E5621C534BBDC0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 07:02:58 +0000
Manifest this update: Sun 10 Aug 2025 07:02:58 +0000
Manifest next update: Mon 11 Aug 2025 07:02:58 +0000
Files and hashes: 1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: AsqU56JJNLTzpP2aoOI7Fuy9ajot8+ZJpmUdwhI58mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ca:29:3a:93:45:cd:c2:e5:62:1c:53:4b:bd:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Validity
Not Before: Aug 10 07:02:58 2025 GMT
Not After : Aug 11 07:02:58 2025 GMT
Subject: CN=b0e5671d9b548a2a55f3ccc54dfb536b56d70726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:da:1f:f3:2a:9f:5b:10:e7:ff:b1:98:20:
22:ee:d9:4e:be:81:fb:81:45:ef:4c:6d:70:ab:bb:
85:81:7a:12:30:74:a1:1c:dc:89:fb:78:d3:81:89:
d7:4f:43:47:6a:38:bd:ad:d5:35:de:80:f2:c1:a9:
82:e3:7b:c7:ba:b8:3c:bb:bf:6f:28:bb:e2:e3:27:
e1:c4:9d:18:88:c1:7c:52:3d:e9:49:d8:72:89:72:
3d:46:7f:cd:17:5c:04:b9:f5:e3:a7:42:a6:8e:16:
cf:46:cd:ba:ca:08:6c:74:a8:e9:31:ce:31:61:e8:
c8:9d:35:d4:bb:c4:91:1b:b8:83:4e:af:de:b1:99:
59:6e:ee:ec:ba:a4:78:70:7a:28:95:4c:dc:14:ab:
71:7d:31:46:0e:51:23:c0:cf:6c:7b:8d:3d:be:55:
3b:b0:54:9b:96:1d:2c:c0:ee:0a:48:df:14:ea:9f:
ed:fe:5b:e8:99:84:ea:5c:5c:59:0e:c1:0f:08:e9:
e0:d9:c2:27:60:8a:ad:13:0e:55:75:1f:31:60:69:
65:9f:19:02:4f:01:fe:95:8e:0d:eb:76:5e:76:1b:
a1:df:6b:b7:3e:36:83:e5:7a:83:67:14:13:da:eb:
d6:44:a5:7b:ac:08:82:f5:2a:8e:62:17:5a:2a:c2:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:67:1D:9B:54:8A:2A:55:F3:CC:C5:4D:FB:53:6B:56:D7:07:26
X509v3 Authority Key Identifier:
keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6f:70:ce:4d:de:40:97:e1:ce:1c:75:aa:1e:55:9c:10:37:
15:24:e0:94:15:ce:9a:46:38:f7:7a:7d:bf:bd:f9:0e:84:1e:
9f:b0:75:c7:bf:87:3d:d1:21:33:02:80:cb:e8:52:f4:09:7e:
4f:b9:c2:64:32:fd:49:52:b3:46:c1:99:85:ca:d2:fc:94:91:
08:37:8f:5a:9a:9a:34:d1:7d:fe:b9:c4:ea:fe:96:2d:69:5d:
98:a0:43:f4:e7:7a:4a:40:ae:9b:8a:1b:f2:12:c7:95:6a:9d:
2a:ef:a1:d5:c2:e8:c1:37:30:c1:cf:db:0e:ec:29:5c:c1:f4:
1c:3b:f8:c0:6e:20:3e:91:9a:9a:42:b1:c9:72:d9:2f:5e:1f:
90:67:ea:22:17:22:17:f8:fd:c2:90:33:13:8a:cc:96:0b:98:
95:69:b6:3b:7a:b0:c0:2d:b7:19:36:16:25:47:05:f3:53:dd:
85:81:a0:95:af:bf:19:67:9a:d8:86:27:c5:f0:9b:e9:96:3a:
6e:d5:d5:13:d4:71:ac:7d:44:05:65:7b:d8:7a:13:d0:40:19:
7a:28:df:9a:bb:af:51:06:c7:e4:35:12:31:77:4a:20:da:7f:
0c:16:33:69:57:c6:f9:ba:ab:14:be:2e:50:bb:5e:c1:e8:8b:
70:8e:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:28 2025 by rpki-client