
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: iDEJaWmuzUu+XOaE3xmkdhxdCRwa6Bi+YWZTmLIiOZc=
Subject key identifier: 0A:45:39:0D:32:B8:38:4E:6F:1F:5E:70:FD:40:5C:C7:DB:27:B4:BF
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019872CF5561274A7D782EF656A536CB85B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 1318
Signing time: Mon 04 Aug 2025 02:00:47 +0000
Manifest this update: Mon 04 Aug 2025 02:00:47 +0000
Manifest next update: Tue 05 Aug 2025 02:00:47 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: gTkcSq2c60AOhqx018SCnt0Ksh6chJyennDoNimkFnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:55:61:27:4a:7d:78:2e:f6:56:a5:36:cb:85:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Aug 4 02:00:47 2025 GMT
Not After : Aug 5 02:00:47 2025 GMT
Subject: CN=0a45390d32b8384e6f1f5e70fd405cc7db27b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:28:77:b5:33:86:02:48:67:06:20:83:31:
33:00:5a:63:a4:49:7b:29:87:2c:82:d9:11:3e:50:
f1:d8:11:17:43:5d:37:5b:48:d8:f9:48:6c:37:59:
53:ef:a3:a1:05:60:ac:8b:d5:a6:79:11:a0:db:e9:
73:4e:82:9d:ef:00:40:b6:fb:5c:e1:71:58:04:7b:
15:f9:11:57:f8:4e:90:18:d7:48:38:80:a8:c8:1b:
ae:63:9d:72:3f:c3:2e:fa:d0:ea:ca:83:0f:92:19:
95:fe:4c:88:17:30:e2:26:9c:79:94:5c:5e:ac:9e:
50:62:c4:6d:79:9a:aa:9c:f5:f4:14:ac:26:f7:d5:
61:8b:7a:5c:0f:c7:37:72:5d:12:0e:6c:e9:ff:3a:
a3:f8:54:f0:56:28:c5:cf:4a:7d:5d:ff:eb:9b:18:
75:d0:2e:f2:c0:c7:fb:e1:54:b2:ad:4c:2d:23:c9:
f5:5f:cf:13:50:e2:ff:04:f8:ee:31:c2:e9:c4:6e:
7f:d2:d5:15:40:72:10:67:4f:df:d7:63:00:a2:cb:
2b:52:4b:e3:d7:99:dd:9f:d9:d2:9c:4b:2a:10:55:
26:66:e8:fa:cb:c3:ae:f8:e8:55:10:40:80:d1:c6:
87:72:5d:43:2a:b3:3f:1d:bb:14:08:b0:73:e3:83:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:39:0D:32:B8:38:4E:6F:1F:5E:70:FD:40:5C:C7:DB:27:B4:BF
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:a9:6a:83:c7:ae:42:47:f7:3d:ef:95:9e:8c:6f:7d:28:
95:45:53:b3:1c:f3:36:cd:3a:1f:d5:3f:63:de:83:7b:1a:e0:
93:5e:7f:51:57:7c:de:11:f6:95:66:c2:b2:7f:93:6d:40:9c:
ca:04:8a:17:52:92:a4:38:ae:a0:01:ea:3d:40:86:2e:b2:64:
8a:ba:19:0e:2c:06:c5:79:9d:94:f7:9f:fa:36:29:7d:6e:7b:
66:31:25:d7:0e:bb:13:cc:31:1f:88:34:c6:fd:04:e8:28:b1:
44:8b:9b:53:f1:3c:3d:38:d2:d6:62:e1:f4:e4:82:b5:67:b1:
3d:25:56:42:37:e5:da:5b:c9:4e:62:d6:fe:90:24:cd:5e:35:
f2:1d:10:84:18:e5:da:3e:33:5d:d7:2f:ac:02:0d:6f:a8:f0:
a2:37:57:45:b3:e6:e8:b9:32:ba:2e:8b:b2:63:62:80:c3:cd:
4b:db:ee:fe:c7:98:c9:c0:63:46:7b:91:2e:b0:5a:03:6f:65:
6c:76:ed:67:61:ef:d4:bb:16:7a:12:21:07:e1:bd:14:e4:c2:
27:38:b5:86:e2:07:d6:bf:4d:e1:cd:e3:bd:ad:16:57:ae:4b:
8f:1f:47:49:26:5f:0f:aa:1e:b2:9c:7d:3a:69:d6:7d:5d:9c:
c0:9a:c7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1VhJ0p9eC72VqU2y4W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWFmY2Y0ZGU5MjBiOWNlNjQ1ZDZlNjk2ZGYwOGFhOGIw
NTUxOWIwHhcNMjUwODA0MDIwMDQ3WhcNMjUwODA1MDIwMDQ3WjAzMTEwLwYDVQQD
EygwYTQ1MzkwZDMyYjgzODRlNmYxZjVlNzBmZDQwNWNjN2RiMjdiNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUAod7UzhgJIZwYggzEzAFpjpEl7
KYcsgtkRPlDx2BEXQ103W0jY+UhsN1lT76OhBWCsi9WmeRGg2+lzToKd7wBAtvtc
4XFYBHsV+RFX+E6QGNdIOICoyBuuY51yP8Mu+tDqyoMPkhmV/kyIFzDiJpx5lFxe
rJ5QYsRteZqqnPX0FKwm99Vhi3pcD8c3cl0SDmzp/zqj+FTwVijFz0p9Xf/rmxh1
0C7ywMf74VSyrUwtI8n1X88TUOL/BPjuMcLpxG5/0tUVQHIQZ0/f12MAossrUkvj
15ndn9nSnEsqEFUmZuj6y8Ou+OhVEECA0caHcl1DKrM/HbsUCLBz44MJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApFOQ0yuDhObx9ecP1AXMfbJ7S/MB8GA1UdIwQY
MBaAFNLq/PTekguc5kXW5pbfCKqLBVGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84Mjc4NWYtZjBjNS00MzEzLTkxYTEt
NmRmZDhiYmFkZmU5LzEvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84Mjc4NWYtZjBjNS00MzEzLTkxYTEtNmRmZDhiYmFkZmU5
LzEvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcCpaoPH
rkJH9z3vlZ6Mb30olUVTsxzzNs06H9U/Y96Dexrgk15/UVd83hH2lWbCsn+TbUCc
ygSKF1KSpDiuoAHqPUCGLrJkiroZDiwGxXmdlPef+jYpfW57ZjEl1w67E8wxH4g0
xv0E6CixRIubU/E8PTjS1mLh9OSCtWexPSVWQjfl2lvJTmLW/pAkzV418h0QhBjl
2j4zXdcvrAINb6jwojdXRbPm6Lkyui6LsmNigMPNS9vu/seYycBjRnuRLrBaA29l
bHbtZ2Hv1LsWehIhB+G9FOTCJzi1huIH1r9N4c3jva0WV65Ljx9HSSZfD6oespx9
OmnWfV2cwJrHoQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:03 2025 by rpki-client