Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: GHYXTVs7GeKLrAMdmyrz50L98dUuIzFQeoH9hP7YGKY=
Subject key identifier: 0B:73:B3:5A:45:33:5A:15:61:9F:B2:AA:F0:80:58:2B:DB:8D:32:21
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019882B0643149E84B4AEDE529606B67E5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 15AC
Signing time: Thu 07 Aug 2025 04:00:54 +0000
Manifest this update: Thu 07 Aug 2025 04:00:54 +0000
Manifest next update: Fri 08 Aug 2025 04:00:54 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: i6j6MsVp4cbNVlf98+wHq3f8p8danlsXaI93aJTaVdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:64:31:49:e8:4b:4a:ed:e5:29:60:6b:67:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Aug 7 04:00:54 2025 GMT
Not After : Aug 8 04:00:54 2025 GMT
Subject: CN=0b73b35a45335a15619fb2aaf080582bdb8d3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:2b:2a:0c:c2:a3:32:73:8e:c8:09:85:d0:
39:5c:1b:0d:e2:60:4b:01:87:73:9e:73:1d:0c:0e:
4c:3e:af:fa:d8:26:29:9d:2f:68:89:35:e2:95:db:
1a:e6:d9:bd:48:9d:c3:e0:1b:8b:38:06:96:64:e5:
cb:a4:ab:56:ba:b3:06:9e:ee:88:eb:05:ec:b9:39:
4b:99:bc:5d:3f:b1:5a:e5:67:e7:09:63:4e:6b:03:
f4:72:60:de:6a:c5:70:d4:c1:26:17:e7:3f:1d:2d:
6b:b1:1f:cc:62:5d:14:5b:af:c0:0f:31:99:89:dc:
ae:07:b2:a0:0c:18:5c:a5:6f:1a:d9:cf:ca:92:fc:
ca:d2:1d:ef:a8:b5:f2:b6:0f:41:26:98:d7:89:af:
91:c5:69:26:3f:69:26:18:99:61:bf:27:80:e1:31:
45:65:7f:b2:11:58:2f:d9:25:c8:ba:32:63:41:13:
5b:ae:47:c8:31:1b:98:80:0f:7b:9f:c3:3a:69:0b:
93:0b:53:34:33:87:3b:31:d9:22:be:55:9c:82:75:
41:1d:d8:cf:09:aa:7a:f8:4f:e3:5c:64:bb:5c:d9:
49:d3:b3:26:5e:2b:ef:bc:f6:3f:49:09:14:31:02:
0b:5f:2c:e9:09:59:5e:1b:64:fa:c9:04:95:1a:c0:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:B3:5A:45:33:5A:15:61:9F:B2:AA:F0:80:58:2B:DB:8D:32:21
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:42:c7:6d:92:05:04:60:47:79:4e:a8:57:d2:64:b2:8e:25:
04:a7:6b:36:b9:1f:07:70:f7:87:77:2d:38:f3:18:4f:8d:b4:
4e:bf:04:3b:43:e1:98:b3:17:53:01:36:b4:d8:b6:2d:65:cd:
79:c2:1f:e9:48:62:89:53:69:4d:e6:5a:bd:e9:2e:1e:10:30:
7a:0f:c6:3f:d6:36:38:24:24:ff:c1:bb:51:94:9f:77:df:e9:
42:25:e3:02:e2:91:04:3c:50:79:bc:8a:e9:07:5f:ac:16:12:
ec:5c:03:fe:6a:4f:30:5a:dd:cf:c0:7d:d0:99:1a:48:2e:44:
95:8b:39:11:89:7a:ea:75:53:71:3e:e0:5c:08:d8:b6:8a:a1:
46:90:e6:86:a3:22:b3:af:ec:9a:ec:02:84:cc:9a:63:ce:5b:
7f:04:64:81:ef:64:8d:e9:82:a4:b1:a9:f6:8b:37:9b:61:29:
d9:bd:68:38:81:ba:e7:c4:7a:b6:60:48:2c:a5:fd:4d:82:4d:
34:79:da:3e:af:e3:72:09:0b:bb:d1:44:95:7b:44:eb:08:7b:
01:54:0d:d9:b3:57:f9:75:e8:d6:b4:cc:b1:f5:b4:7a:d1:6b:
ca:e6:0e:ed:18:6b:78:e3:f0:91:ca:72:e3:70:91:5f:1c:2f:
b1:8b:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:34:34 2025 by rpki-client