Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: SHBU9iYpl29GlG01M+ZYeYEFZe2Mt23oxmZgvV9VfUs=
Subject key identifier: 62:4C:77:BC:9C:A8:DE:ED:35:2E:CD:E5:79:30:A1:A4:C7:67:DC:E9
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 01987CE56570C3B2FE4CF57E03641FCC8B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 053B
Signing time: Wed 06 Aug 2025 01:01:05 +0000
Manifest this update: Wed 06 Aug 2025 01:01:05 +0000
Manifest next update: Thu 07 Aug 2025 01:01:05 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: xTFv/g1TvC3tB4BPx6jnKxBQwvhRf5Vp/zCfp54QZ0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:65:70:c3:b2:fe:4c:f5:7e:03:64:1f:cc:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Aug 6 01:01:05 2025 GMT
Not After : Aug 7 01:01:05 2025 GMT
Subject: CN=624c77bc9ca8deed352ecde57930a1a4c767dce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:a1:7d:ae:4e:a7:92:30:ba:03:57:6e:90:
be:f5:77:be:54:04:04:2e:4e:f4:f8:82:eb:ef:41:
f8:75:1d:2f:c9:49:74:e1:06:be:31:e5:da:3e:76:
26:82:b5:65:ce:3f:00:75:2a:f8:10:ad:75:db:64:
db:c8:ce:52:aa:d9:d4:c4:02:db:15:ce:49:62:db:
fe:30:d2:ea:86:86:c3:e2:3b:d5:db:7f:ae:b5:8e:
51:7a:dd:47:1b:dd:54:bf:70:6a:44:38:9a:7f:83:
15:fb:09:25:49:20:37:36:32:8e:ec:41:cc:17:e9:
6a:fe:80:34:1a:4f:71:de:88:83:00:44:6b:39:e9:
5f:6d:6b:78:a4:70:8e:ab:99:1e:ec:e7:b6:76:4f:
1c:f1:59:bb:a4:a5:a5:85:df:77:0b:ea:03:10:ee:
a4:f1:3b:e9:db:56:5f:49:f9:6c:c6:64:88:a0:ca:
8d:e0:ed:fe:9a:90:14:01:81:24:2c:e4:27:e2:d8:
99:f3:c0:33:a2:46:2f:76:e9:2c:7b:ce:b8:c0:20:
83:96:5b:00:ea:5c:0a:8e:ad:e8:95:5c:0c:7b:1f:
a2:22:6c:07:c1:98:0c:73:18:88:88:ad:59:26:66:
b0:49:0a:fb:d5:1a:3b:70:c1:ad:de:9c:d0:d5:60:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:77:BC:9C:A8:DE:ED:35:2E:CD:E5:79:30:A1:A4:C7:67:DC:E9
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f9:7f:24:eb:3b:ae:b4:90:dc:ee:c8:8a:74:11:f8:0c:29:
86:35:b4:ba:c4:b4:91:e6:41:dc:3f:9d:f8:39:53:d6:af:75:
ea:67:42:94:15:e0:bc:01:36:bd:6f:60:db:b7:26:b7:b9:c5:
b4:cd:b2:45:67:a9:5a:96:bf:00:55:32:a7:84:52:5d:34:d5:
82:63:dc:e2:a5:09:97:fb:c0:fd:27:17:aa:f2:21:d6:37:4d:
d2:22:7f:72:6b:b2:88:09:04:c2:a1:89:fa:90:9c:da:90:ae:
99:8b:93:23:dd:ef:20:65:1d:c8:5a:66:85:aa:e8:ea:5c:aa:
c4:9e:da:35:29:bd:b7:f1:71:5b:db:77:45:ac:f8:aa:36:df:
ca:8e:1f:62:d5:70:7e:31:88:b4:dd:74:ba:89:dd:47:f9:63:
89:95:cc:cc:77:f2:2c:68:21:47:44:50:43:5c:a5:fc:b7:d2:
09:b0:ec:ca:d8:14:79:fb:b3:59:21:c4:6f:09:2c:b4:df:6e:
48:42:85:96:d4:4f:1f:10:fc:f1:f4:6c:34:f3:a6:9c:86:25:
d4:85:a4:9b:a5:b6:8b:b1:8e:2f:9b:be:36:35:de:45:dc:e4:
57:7e:36:06:99:f6:7b:86:16:f2:7c:b0:1f:7b:28:52:21:35:
5d:21:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:48 2025 by rpki-client