Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: OttBMsaxurgaF9yZqYHaVBBoP3P3D6W0/9fRby6HBIQ=
Subject key identifier: E0:8A:84:84:3C:5F:95:44:63:62:D8:A1:83:64:E0:E1:30:FD:1D:5B
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019873E25A485A8273858D39BC5F168460AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 06C3
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: QgDw+m49aZKp0sWQG8eqA8Q0w32rPyC1OwsyN6A+rtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5a:48:5a:82:73:85:8d:39:bc:5f:16:84:60:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=e08a84843c5f95446362d8a18364e0e130fd1d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:2f:7f:82:57:19:2c:c6:df:b1:b1:53:64:
71:c3:85:3a:6c:2b:4e:4f:33:c8:59:ff:68:63:57:
5d:c1:ff:ef:55:3e:6b:ba:65:af:6e:c2:b8:00:64:
2b:69:32:d6:35:80:1b:97:1c:1b:88:a6:8a:b6:59:
71:64:8c:5c:0c:1a:68:83:ce:ce:f7:b3:2c:c8:c3:
6a:15:03:8f:cb:ba:fc:11:99:fa:6a:da:65:1a:c3:
8d:02:fb:45:36:e7:3c:7d:ec:12:75:a6:17:26:bc:
b2:c6:e6:ee:e6:b0:0c:78:f6:59:c4:de:2e:37:da:
36:09:f1:f2:12:39:85:0a:aa:d1:ac:3b:d4:e4:91:
fe:b9:d4:6f:c0:ba:ad:c9:6a:2f:45:86:09:7b:35:
a8:18:7f:6a:04:cc:14:5b:75:77:92:27:5f:3d:57:
cc:1f:64:04:9d:72:28:3b:07:52:e2:5a:af:e1:eb:
55:70:b3:df:55:9c:e5:f2:12:5d:74:2b:de:69:86:
23:c8:43:ff:5d:b6:d6:57:f8:0e:bf:8a:ba:a1:3a:
3e:b6:ad:ee:01:ef:06:ac:5d:95:5f:ec:a7:db:60:
7d:0d:56:73:04:7b:2a:3e:01:ef:df:b5:da:ba:00:
b8:9a:e2:36:2e:d4:68:7c:12:52:3b:9a:e0:3f:d1:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:84:84:3C:5F:95:44:63:62:D8:A1:83:64:E0:E1:30:FD:1D:5B
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:04:41:09:63:9f:aa:09:ae:e4:c6:89:83:1e:29:29:86:
5d:bb:1c:b1:39:42:95:aa:a4:cb:8c:e6:ee:0a:4f:88:b6:1c:
c8:bc:10:b9:35:5f:79:e3:f0:bf:30:05:20:b7:55:2f:9c:5f:
e3:4b:b3:f4:ba:a6:9a:47:07:af:0f:dd:c4:6d:50:a9:74:83:
2d:68:39:be:13:a3:aa:c3:24:b6:ff:0a:7b:50:49:f7:78:3c:
0d:cc:fc:26:5e:b9:ce:46:be:91:fa:6b:3d:55:cf:45:f7:31:
48:e2:3f:b2:d7:d1:a8:5a:76:80:6f:ff:83:6b:1a:ab:24:ab:
88:72:00:80:8a:18:50:8d:78:11:ce:6c:41:fd:a9:88:23:38:
80:ed:3a:60:b4:47:79:97:f0:92:e1:77:34:a7:63:e0:93:46:
e9:2f:76:0f:fe:a4:ad:d1:4c:fa:a9:62:fb:b6:72:e2:37:ad:
c0:51:e5:ff:01:d3:15:1e:59:4e:cb:28:74:9c:03:0f:cf:f6:
8c:e5:b3:69:e7:48:10:5c:cb:4f:0f:72:28:54:4d:d6:bc:7b:
0e:97:a4:eb:bb:3c:f2:b3:a9:c2:81:4e:c8:b8:15:c6:45:aa:
dc:38:20:24:98:57:f3:f9:93:58:54:60:b2:24:da:34:b0:5d:
ff:3a:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:41 2025 by rpki-client