
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: RlrzyIUR4bVLCd0EsWIA2sgfeU10rlSUKkEkWQPMpII=
Subject key identifier: 92:70:90:98:B1:67:70:EC:F5:3A:2E:FD:6C:AA:C6:33:CE:B7:CF:F9
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019873E4293052BD0C542D0A41BA749871B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 15E0
Signing time: Mon 04 Aug 2025 07:03:09 +0000
Manifest this update: Mon 04 Aug 2025 07:03:09 +0000
Manifest next update: Tue 05 Aug 2025 07:03:09 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: CHL+MDA2etCkuJWDaMm2s0SLlg6AHKzeYvW8D5Aq4qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:29:30:52:bd:0c:54:2d:0a:41:ba:74:98:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Aug 4 07:03:09 2025 GMT
Not After : Aug 5 07:03:09 2025 GMT
Subject: CN=92709098b16770ecf53a2efd6caac633ceb7cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:7b:47:1c:e4:f8:02:96:c8:f7:58:32:b1:
81:83:e3:bc:08:37:46:26:23:ec:de:10:28:4e:08:
b1:9a:1f:7b:f8:e0:6f:6e:fa:d7:e4:f3:22:c5:d1:
15:43:4e:48:90:b2:a9:12:8d:cb:91:97:ef:42:32:
18:e5:59:ba:55:43:b4:17:f0:a7:dd:76:ef:26:9f:
9d:04:9a:9b:e8:67:6c:24:51:ed:fd:7b:d0:a5:22:
23:0c:ae:72:8a:98:f6:36:5f:a0:62:aa:9b:47:8d:
7a:c7:2f:e6:29:81:06:d3:fd:4f:7e:34:2d:57:4e:
f6:db:6f:78:c6:32:8f:5a:4f:9f:b0:ff:2d:fa:09:
c4:11:9a:1e:e3:33:55:cc:17:38:09:9b:a9:68:d9:
09:9c:22:b8:3f:55:33:15:2a:4f:e8:0a:ef:67:86:
89:c5:36:33:64:98:b0:ca:77:bf:be:54:bc:eb:7b:
5f:1f:da:3e:0b:15:46:d8:4f:13:b2:8b:12:5d:b4:
d5:8a:7c:19:d2:6d:bf:9d:cf:75:23:cd:a8:7e:a0:
7d:3c:ae:f3:50:95:5c:82:c3:9a:ab:d7:eb:f1:65:
14:e9:01:94:d9:d5:99:af:5d:9f:a1:5a:0e:8b:a9:
5c:29:cd:b0:de:bc:d9:22:c3:e4:d7:25:59:fd:ee:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:90:98:B1:67:70:EC:F5:3A:2E:FD:6C:AA:C6:33:CE:B7:CF:F9
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:14:0a:ba:83:8a:45:5c:b4:5e:90:e8:d9:c3:3a:5a:cf:
35:41:61:96:02:10:51:60:ff:46:da:85:0f:d9:54:03:27:c4:
e1:f7:f5:9e:bd:02:e5:6f:cb:28:b3:d5:80:70:ae:0d:a8:a1:
fe:cd:4b:6d:a0:d2:f2:d7:9a:0c:99:51:59:2f:72:82:f2:76:
54:8d:44:2b:c8:5e:93:26:f7:4f:2a:f1:af:fa:14:eb:b1:39:
42:93:02:d5:a6:61:bd:87:00:d5:52:91:ee:48:2d:dd:96:eb:
37:0b:b2:7b:ec:80:06:97:7e:8e:03:0b:12:b3:54:10:d3:96:
27:55:ae:20:37:3c:28:c0:8c:e8:f5:2f:40:e3:ad:e4:ee:e6:
95:46:33:7f:10:ea:54:61:50:e1:cc:3f:e9:6d:72:83:39:14:
92:15:d1:f7:d1:10:8e:2d:99:64:ab:96:59:2c:d5:97:26:55:
ef:6e:b5:10:fb:ac:94:e5:ab:cf:be:eb:0f:c3:95:70:8f:82:
19:02:0d:d2:7f:82:9f:fa:25:b3:85:54:9b:c6:cf:cf:1c:5f:
49:20:ab:58:c5:24:70:53:cb:c2:16:9c:fb:ac:ad:f9:a4:e7:
b5:fb:0a:52:d3:34:da:6a:47:6c:22:32:dc:6e:41:fe:e2:01:
5e:4b:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:07 2025 by rpki-client