Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: tVopknTW/6SZgY+U83tWOAqObixkqnTC5ChhWxFPZms=
Subject key identifier: 5B:67:67:66:6F:B0:3E:31:1A:7C:6D:B6:62:5A:7D:7E:06:B8:CE:55
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019873E36E0FA21A628D511F40EAB3D47C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:21 +0000
Manifest this update: Mon 04 Aug 2025 07:02:21 +0000
Manifest next update: Tue 05 Aug 2025 07:02:21 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: r52p+Xgku04yFxpGljumau51ybZW0rjQQ+vDcWltQVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6e:0f:a2:1a:62:8d:51:1f:40:ea:b3:d4:7c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Aug 4 07:02:21 2025 GMT
Not After : Aug 5 07:02:21 2025 GMT
Subject: CN=5b6767666fb03e311a7c6db6625a7d7e06b8ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:e3:ce:80:5c:0d:c0:36:81:65:42:5d:15:
91:45:3d:ce:a7:d8:36:94:46:a2:a5:6b:44:44:ee:
af:8f:a3:6a:cc:0f:c1:79:69:66:ef:b4:bb:90:3f:
21:67:02:1b:c7:07:30:8e:e9:c3:d7:f2:fa:22:ef:
5c:fb:5d:89:d7:0c:4c:10:d4:8e:24:6f:b6:9c:cd:
41:67:ea:28:e9:59:7d:45:63:9c:e8:34:bd:8d:a3:
e9:6d:eb:74:56:f7:7a:48:0a:37:f9:ce:66:d3:ba:
42:e9:5b:bd:bf:fb:10:84:7e:5a:e6:44:92:4b:cb:
47:a1:f1:cf:5f:96:15:2f:d5:f2:e0:dc:19:fa:0c:
78:ce:c7:ae:6b:49:05:4a:0b:0d:80:06:99:e3:54:
51:85:52:af:3e:2f:96:69:98:d7:78:3a:f2:c5:44:
0e:16:be:97:20:55:10:34:f1:a5:a6:9e:22:78:38:
1e:b2:ff:98:73:9a:e3:a5:95:9a:8f:7a:bc:9c:cb:
dc:58:5b:ad:95:98:cb:06:d0:64:ce:b1:0e:8d:48:
12:37:68:a9:7b:99:e2:29:e8:7c:be:21:b8:56:7a:
ef:cf:cc:c3:1f:d7:7a:48:df:a0:77:df:f8:58:5d:
9b:19:af:53:43:4f:d6:27:f4:cc:6f:7a:d9:d3:1b:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:67:66:6F:B0:3E:31:1A:7C:6D:B6:62:5A:7D:7E:06:B8:CE:55
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:c7:97:a1:ab:bd:3c:54:8c:0b:cd:05:1f:26:36:3f:b0:
01:e5:84:4d:1a:86:02:99:46:d3:e0:00:30:15:b9:b2:ac:6a:
81:8b:7b:b6:f0:e1:4a:d9:be:03:67:9e:db:4a:b6:6e:e4:de:
a7:0e:f4:43:21:b0:a7:d3:55:5f:b8:62:71:96:53:4f:45:43:
7f:15:e8:7a:02:a4:4a:08:24:53:70:c1:5c:71:2d:c3:16:8f:
aa:d5:ab:26:48:06:9b:34:30:eb:41:f8:69:a1:5a:8e:9f:a0:
1c:3b:0a:0c:54:67:89:d4:cd:15:7a:2d:bd:d4:49:0d:e8:f3:
10:65:93:30:7d:c4:a8:90:8f:0e:61:82:06:be:cb:34:f4:e6:
cb:62:17:00:82:45:b2:17:68:ee:f9:66:e0:c9:db:06:6a:5f:
98:b0:29:6c:42:ca:07:a0:0b:29:7b:fc:8f:ed:67:43:be:dc:
80:95:4e:e9:e0:55:d1:48:bd:2e:66:70:f2:a1:91:7c:f2:9c:
d7:f2:e7:3c:c9:b7:92:af:bb:3c:6f:11:fe:4a:b9:fc:95:85:
d5:57:48:48:a2:a6:16:0a:6b:dd:65:99:5d:11:fd:49:41:e4:
48:d1:b3:33:d4:4b:56:3d:35:f1:d9:50:bc:e4:b6:0c:e5:6d:
86:da:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:05 2025 by rpki-client