Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json)
Hash identifier: z7fbzHbQ7KYGhx0tPjYua1yEJpP/HE30ohytjQvozF0=
Subject key identifier: 0C:00:3A:C6:28:FF:D8:64:4B:6C:1C:88:15:DA:69:9D:86:52:61:48
Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Certificate serial: 019873068D70CE28748C42BA538DB34D1D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
Manifest number: 0115
Signing time: Mon 04 Aug 2025 03:01:05 +0000
Manifest this update: Mon 04 Aug 2025 03:01:05 +0000
Manifest next update: Tue 05 Aug 2025 03:01:05 +0000
Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: kYd3B7QH3MOlKgnopZ9yWZA7h5tVz4rjePkwkXhQ+hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8d:70:ce:28:74:8c:42:ba:53:8d:b3:4d:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Validity
Not Before: Aug 4 03:01:05 2025 GMT
Not After : Aug 5 03:01:05 2025 GMT
Subject: CN=0c003ac628ffd8644b6c1c8815da699d86526148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:20:5e:91:49:da:ed:43:70:f4:5b:79:d9:
ac:85:bf:eb:8f:b1:af:9a:0c:b0:cf:93:69:cd:05:
f7:f7:ff:ef:09:a0:94:a6:c1:66:32:11:d4:c1:d1:
e6:69:f8:a6:32:a6:86:9e:d6:a6:8e:f7:0d:61:11:
fd:92:da:ce:2c:2f:28:4a:07:41:c0:10:a7:9f:27:
7a:9c:2d:53:cc:e2:17:c1:37:df:97:be:89:bd:97:
dc:34:71:b3:ba:32:d0:16:8f:16:37:d1:2f:31:d6:
fd:03:f6:51:9b:66:74:a3:a1:fe:1f:18:46:90:51:
a9:03:28:49:91:4a:b3:6f:0c:7d:82:39:66:e5:75:
d1:e7:2e:3e:a3:5e:72:f2:c5:51:87:77:4b:ed:9a:
48:00:01:c2:09:93:70:6b:26:87:ed:28:f4:b6:bb:
07:04:c3:1b:d1:f2:5c:78:65:96:7d:80:4b:48:d1:
44:18:ae:34:c1:10:2c:65:02:79:7a:9e:72:ec:cc:
89:2e:72:01:1a:07:c8:9d:3d:45:05:a6:ed:d6:51:
00:58:f3:39:fb:e9:c6:10:26:69:33:1b:4e:f8:3f:
c8:92:6d:bf:91:8f:00:d5:44:cd:db:6c:b1:9a:9e:
cb:76:b1:1f:70:1c:38:20:3a:45:2a:f4:49:69:96:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:3A:C6:28:FF:D8:64:4B:6C:1C:88:15:DA:69:9D:86:52:61:48
X509v3 Authority Key Identifier:
keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f3:5a:d5:34:52:20:57:68:bd:70:f7:f4:52:d2:ed:42:51:
91:cc:04:91:7d:e3:1c:c3:c6:25:e4:97:63:99:5e:c8:27:e6:
9f:a2:b1:da:af:74:3c:93:c3:8c:91:78:ac:05:c8:85:27:37:
28:c9:e5:66:70:7d:6a:1a:8b:88:51:6b:23:5e:41:e0:92:8a:
16:ea:e4:94:bf:ee:57:98:50:0b:5b:48:0b:73:b6:cd:70:fa:
9f:5a:01:2c:74:f8:9c:f1:62:e5:f6:3c:be:f9:20:96:be:07:
4b:56:77:6e:f2:d9:b9:18:9c:80:7a:e2:d3:06:e9:3c:7e:d9:
a9:1d:73:e7:4a:ab:f5:36:95:e2:1f:41:65:73:9d:22:5b:3b:
1c:be:38:94:23:9f:65:15:a4:a2:50:61:e5:8b:91:20:9a:80:
05:1b:44:9f:42:62:b1:8b:11:8c:92:4c:eb:9c:f9:28:45:98:
c9:2e:be:5c:b5:15:d8:c6:27:46:ae:fd:fd:fa:45:8f:6f:33:
d5:92:03:39:13:25:f3:58:b2:58:03:9c:fb:04:db:c3:35:08:
83:4e:a4:45:ce:9b:14:1f:9d:84:6d:c6:f7:1d:b6:12:34:a9:
7e:99:38:2d:52:e3:79:25:57:78:d0:b7:ed:a3:0f:35:7e:0b:
6f:f4:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:24 2025 by rpki-client