Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: A9HvGlO9ZMS+yrNgP7MQ0RMQgKWmjLtiRS6SeVJCkHg=
Subject key identifier: 67:AD:2E:67:29:AC:53:3C:92:24:E5:64:BB:2F:A1:42:2C:7A:5E:A6
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019896A635AAD266CFD2E4FE9B9B7D94FA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 01:02:11 +0000
Manifest this update: Mon 11 Aug 2025 01:02:11 +0000
Manifest next update: Tue 12 Aug 2025 01:02:11 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: q6A7WYrGcns1qEXl03l/r+XvrskO+mF2Ddv+3OIb6oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:35:aa:d2:66:cf:d2:e4:fe:9b:9b:7d:94:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Aug 11 01:02:11 2025 GMT
Not After : Aug 12 01:02:11 2025 GMT
Subject: CN=67ad2e6729ac533c9224e564bb2fa1422c7a5ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:6c:a6:be:39:d3:a9:77:4a:59:a0:92:40:
5d:8b:e3:68:de:c0:c2:ce:46:0e:bb:5a:74:8f:a2:
ff:ee:10:75:07:58:ef:42:e7:87:11:bf:68:7c:01:
24:26:3c:4b:42:96:88:a4:50:a6:26:16:45:82:50:
01:b9:4b:1c:c7:d1:9b:7c:1a:ca:03:d3:61:d0:65:
78:c7:1b:2f:dc:3d:50:a9:3a:44:66:26:47:90:32:
c0:7a:83:dc:40:6d:a0:83:9f:61:2d:61:7b:99:a0:
87:b8:7a:39:21:07:c6:ef:39:56:e6:5f:d2:55:d6:
a5:72:1e:1b:18:ff:d4:55:2f:ff:60:0a:ef:b4:b5:
2c:25:eb:0f:5e:d2:f0:37:1e:46:15:23:99:c0:b3:
76:15:93:be:f6:ba:7b:36:ea:49:95:6e:08:72:df:
d6:99:a1:bb:db:13:ec:4d:9e:df:22:b1:26:fd:8f:
44:b6:3c:81:18:fe:fd:91:91:58:10:58:01:d8:de:
89:b1:f9:ba:ea:bd:da:27:f7:b3:6d:f5:5d:89:d4:
0a:bc:1d:0d:37:ad:f5:fd:30:ef:b1:39:73:74:9d:
84:92:a4:1d:2f:50:cb:8a:78:a5:48:7d:20:46:59:
5d:7a:67:f9:80:af:c8:4d:aa:cc:fa:90:4f:a8:36:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:2E:67:29:AC:53:3C:92:24:E5:64:BB:2F:A1:42:2C:7A:5E:A6
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:65:37:dc:d2:30:f7:64:b4:4a:95:b9:13:05:d2:78:0c:
b6:23:b6:7d:5f:60:dc:0f:f1:66:ef:c6:18:86:fb:99:67:34:
50:6e:c2:75:c4:07:4d:6e:61:cc:fc:b3:3d:3e:b1:44:32:b1:
bb:fb:6d:13:3e:ea:3b:9d:4c:d4:09:39:35:bb:3f:49:38:d0:
f3:0a:1a:b7:30:06:dc:aa:92:ec:4a:ec:d8:2c:bd:ae:b6:66:
56:07:a0:da:3c:4d:47:b0:26:2d:06:10:28:8c:23:8d:74:ef:
39:32:d5:49:ad:29:d0:c6:71:eb:7d:2f:9f:77:49:a0:db:42:
d0:5b:92:76:d2:10:71:56:4e:d0:59:33:62:d0:f2:ac:76:7f:
db:2d:99:16:ed:53:e9:5d:98:51:c8:10:13:99:f1:ff:15:d3:
62:26:01:70:0c:80:d2:52:0c:93:05:e1:fa:25:07:8c:93:7e:
51:1e:f4:ec:86:d3:d7:37:66:67:b2:44:89:47:a8:4f:c6:77:
e6:ed:cb:21:d4:d6:6f:94:8e:5b:2e:ae:1f:fe:c0:10:c4:1c:
b7:0b:31:30:b7:da:f2:02:4a:33:bc:4b:0d:f6:ba:13:39:e2:
1f:07:7a:85:b7:87:13:fc:34:f5:73:14:a1:53:61:1c:dc:43:
a2:6a:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:46 2025 by rpki-client