Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: v9LuH2E6ze/BF369k9L9WdqgewPcXUyd2ht/FsPuDdE=
Subject key identifier: 75:20:EB:BC:28:CD:A0:3B:D3:2C:27:4F:FC:CC:3A:96:84:CD:EE:13
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 019873E4002A032EC3F8F443EAE62383FE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0E85
Signing time: Mon 04 Aug 2025 07:02:58 +0000
Manifest this update: Mon 04 Aug 2025 07:02:58 +0000
Manifest next update: Tue 05 Aug 2025 07:02:58 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: Goo/Xb3qQlqSkVgc3uqAOhD/wKAm999jbj7q89n1ZJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:00:2a:03:2e:c3:f8:f4:43:ea:e6:23:83:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Aug 4 07:02:58 2025 GMT
Not After : Aug 5 07:02:58 2025 GMT
Subject: CN=7520ebbc28cda03bd32c274ffccc3a9684cdee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:60:5a:6c:c0:06:4c:b6:97:eb:f6:33:a9:
2b:7a:0c:ef:e9:70:cf:74:e1:a0:f6:d5:21:3d:44:
aa:51:1e:c1:16:ef:32:ff:b9:e0:d2:59:0f:26:9b:
80:1a:35:c5:ea:0a:2c:01:60:29:fe:06:54:3a:cf:
45:b4:27:ff:dc:2c:36:8d:43:9f:de:bd:8b:5f:87:
69:a5:94:64:21:39:ab:e4:d4:75:97:e4:4e:1b:e7:
f2:9e:ee:f8:6c:ca:90:c5:98:f0:58:b7:b0:52:bb:
68:d7:5b:8b:ce:7f:2d:4f:c3:2c:a4:7c:f6:f2:b0:
3d:00:8f:7c:ac:bd:c9:76:35:e5:7e:2f:47:22:e3:
76:6b:42:98:37:b5:18:f8:b9:15:11:76:32:fc:26:
22:1f:61:85:71:73:b9:42:be:71:f7:9d:0e:9e:83:
4f:cf:ae:ea:99:17:e6:88:5d:76:38:83:71:c7:bb:
ed:9f:2e:6f:aa:4f:d4:19:77:c1:e0:e2:e2:42:30:
e8:97:b6:73:04:9a:63:d0:f3:19:ce:35:a4:0a:ba:
61:5b:d6:24:4b:50:68:97:be:7b:3d:55:de:6b:ca:
78:9c:d3:7a:5c:ca:d3:00:a9:6a:56:bc:1d:71:8e:
31:d0:71:19:d5:01:ce:d3:ba:d2:bd:af:35:22:d3:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:EB:BC:28:CD:A0:3B:D3:2C:27:4F:FC:CC:3A:96:84:CD:EE:13
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:4a:ce:ec:ed:cb:7d:30:84:05:f3:86:c6:df:d3:6f:96:
02:72:1c:e0:8c:dd:75:ce:fe:c3:15:ab:ea:7e:37:b7:50:24:
ad:78:97:6e:e9:c1:45:c1:27:8a:86:20:b8:11:76:fe:89:9e:
24:9b:e9:83:2d:c8:c5:cb:0a:c6:5b:99:80:0e:55:d4:bf:e5:
57:79:7b:63:bd:ef:7e:0c:c4:8c:bb:0a:af:ef:a2:0f:c8:a5:
7c:b1:89:e3:7a:8d:9c:e4:48:39:76:a7:48:31:29:d4:73:05:
b1:a1:76:6d:e8:a1:fa:83:39:8e:cf:08:66:3d:45:47:56:33:
a7:cf:99:23:2d:0e:1e:28:2b:5f:eb:4f:f3:9f:04:74:fe:ff:
da:ba:f1:1c:bb:c4:36:bc:67:b0:32:1d:eb:35:55:17:a4:fb:
7c:2b:b8:c6:95:68:a2:54:17:65:7d:f7:9d:73:12:75:dd:19:
b2:62:50:b2:50:28:bc:5b:7e:94:56:78:b8:31:df:1f:3b:fd:
78:e5:d5:a3:21:d5:55:8d:f7:01:ea:f8:a8:1f:eb:1a:17:07:
51:18:83:22:0a:cb:47:90:00:a5:56:01:4a:37:44:ef:4c:6b:
9b:f1:c5:73:6a:b3:5b:1b:4f:c2:de:4b:9d:f5:e9:25:1f:a1:
4a:ac:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:59 2025 by rpki-client