Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: UB/ykjZ1Dak/jEt26ZIlGMW84WqUMoi5VoKY+mhcsrc=
Subject key identifier: 21:93:C7:D0:B0:8F:04:DB:D0:65:77:5F:38:F4:52:BE:7C:DB:3E:44
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 01988A6A100F378DA4F77ACE7F86F6D0D227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 15B1
Signing time: Fri 08 Aug 2025 16:01:03 +0000
Manifest this update: Fri 08 Aug 2025 16:01:03 +0000
Manifest next update: Sat 09 Aug 2025 16:01:03 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: +INlDRessnKn1cWG4kFaP8SkWjbawAVoPtC0Ihzb0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:10:0f:37:8d:a4:f7:7a:ce:7f:86:f6:d0:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Aug 8 16:01:03 2025 GMT
Not After : Aug 9 16:01:03 2025 GMT
Subject: CN=2193c7d0b08f04dbd065775f38f452be7cdb3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:cf:9d:2f:bf:bb:34:ae:56:45:74:e9:ec:
2e:26:51:bd:07:c7:35:71:02:95:a9:fa:d4:ac:11:
73:85:7e:9c:9b:45:7c:35:b4:38:7a:4d:ff:3c:2e:
f8:1f:91:6d:f8:4c:8d:8c:99:d5:cf:ed:cb:ce:36:
41:03:91:c0:c6:77:1c:28:a2:c7:46:e6:fb:e4:76:
4a:07:0b:ca:02:4c:5a:ed:6c:9e:b1:74:ff:80:13:
27:64:06:2b:39:f1:70:5d:d3:0a:4a:8f:65:9f:3b:
ad:cf:24:06:b6:1e:22:bb:62:9d:01:ed:6a:ca:db:
ed:4b:81:56:e4:bc:83:1f:13:17:75:42:f8:78:e1:
95:1b:f2:51:2d:e1:92:43:d7:9a:e9:2c:0f:0d:fd:
29:ef:76:44:d6:74:1c:82:6b:b9:30:b0:bf:51:99:
69:c0:89:cd:c6:4b:cf:58:7d:43:4f:91:94:68:4e:
98:e6:90:ab:70:71:4d:b0:62:c8:b3:c6:44:27:25:
3f:ce:8e:de:69:1c:b1:84:c8:3f:e3:fb:7e:20:64:
1e:ba:f8:df:63:ae:dd:fc:ae:c5:11:3c:23:b3:5d:
c7:70:cd:b5:1d:80:10:62:cf:e8:f4:c3:75:92:e6:
80:f8:20:e1:da:8c:34:a2:e1:18:8a:05:c0:e1:47:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:C7:D0:B0:8F:04:DB:D0:65:77:5F:38:F4:52:BE:7C:DB:3E:44
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7d:83:1b:69:85:5a:ef:11:23:e8:69:20:a7:e5:c4:bb:9a:
4a:2d:47:99:12:52:94:26:c9:2a:02:76:0b:51:f6:bd:40:7e:
0f:96:71:90:c5:af:4f:dc:59:80:db:99:8a:57:2c:ca:6c:fe:
66:3d:9f:fc:4d:ca:f4:ce:8c:84:e2:7b:d2:cc:6d:1e:54:c5:
a3:76:95:a8:c8:61:9f:89:2e:5e:52:61:f2:96:47:da:6d:5a:
0e:ce:13:96:cb:9e:26:67:3b:d6:5b:05:aa:61:3c:c0:8b:b1:
cb:e0:6e:c1:2d:98:9d:a3:5d:44:c7:ff:a9:50:20:8c:6b:a1:
c9:e6:f5:da:97:66:eb:0f:20:e6:04:f0:05:7c:b2:76:d8:6c:
03:f5:bb:24:20:b9:7b:ce:0c:3d:a6:20:92:d2:47:a9:eb:d0:
7c:de:3a:ac:13:ff:ec:ff:ae:02:8b:cc:68:ca:0e:6f:b5:00:
3f:1c:bc:a5:de:de:66:39:a6:1c:ce:34:5f:a7:e0:f0:e0:f4:
48:35:23:14:27:88:62:fb:57:6b:18:e8:d9:d1:ce:0b:62:83:
b8:96:24:a1:84:6b:b8:c5:43:2b:87:64:8f:68:72:5b:dd:62:
1f:17:ea:bc:72:2d:a8:c6:b5:17:c7:ff:6c:41:61:93:e1:0e:
07:78:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:36 2025 by rpki-client