Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: 33ACgXT9AFz8Ci9qw7JzAkM59ov0Q6NoGfJh7u1TWlE=
Subject key identifier: 74:EA:A0:36:8F:28:73:FE:CD:CB:73:A6:DD:E6:F3:96:64:43:1A:DA
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 0198A04E3B9A63E509DF81DFC607FA1FEC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 094F
Signing time: Tue 12 Aug 2025 22:02:18 +0000
Manifest this update: Tue 12 Aug 2025 22:02:18 +0000
Manifest next update: Wed 13 Aug 2025 22:02:18 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: anhRYfesJuwb4xLwyjlSKJ8Og2rTcywwRFP5+G23j/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:3b:9a:63:e5:09:df:81:df:c6:07:fa:1f:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Aug 12 22:02:18 2025 GMT
Not After : Aug 13 22:02:18 2025 GMT
Subject: CN=74eaa0368f2873fecdcb73a6dde6f39664431ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:c6:c6:54:3f:0d:a2:b2:2f:77:5c:cd:60:
38:cf:e9:56:aa:98:2e:5f:08:1b:92:c3:df:a3:96:
fc:c3:7d:5b:c3:6c:bb:c8:16:97:cb:a3:d1:be:78:
77:fe:b7:c1:a3:cd:a4:98:9f:63:73:5b:e0:89:76:
e5:52:14:1a:1a:70:68:ee:77:17:4d:4e:2e:00:f2:
94:a3:5c:d7:e8:ba:6c:9f:16:68:e8:8b:0c:c5:34:
fc:18:4b:a9:55:cc:f1:d8:9a:6d:43:5a:a7:be:e3:
1c:22:04:5a:cb:bf:cc:bc:64:6c:06:c3:e1:d8:c7:
fa:00:f3:ab:d9:7d:23:30:98:cb:a0:d9:3e:86:8c:
2e:a7:fe:d1:1c:c2:92:cd:6e:e7:c8:ec:87:48:c0:
0e:51:ee:a3:46:72:64:01:5f:dc:1d:99:01:e8:6e:
fe:69:5e:a4:70:73:44:e9:cf:d9:67:63:4e:20:51:
e5:90:70:1e:90:19:88:32:91:48:81:97:f5:4d:dc:
ab:6a:0b:91:c8:1c:c5:1b:92:00:6f:05:cf:42:c9:
09:2c:23:06:91:2a:fa:89:ef:23:89:a3:a1:3b:a1:
d8:34:91:75:1d:b0:42:1e:a1:0c:62:9a:2e:ce:66:
61:89:c2:57:69:30:c8:10:e2:46:8b:cb:93:0a:63:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:A0:36:8F:28:73:FE:CD:CB:73:A6:DD:E6:F3:96:64:43:1A:DA
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:c1:3c:3b:61:cd:51:8c:27:4c:95:bf:cc:10:85:bd:f7:
aa:84:19:95:2a:c1:b7:f3:33:b2:de:51:d6:7b:bb:6b:9d:93:
6d:5e:42:6d:76:50:43:4a:8e:56:fe:20:f5:a5:e3:bd:ab:b1:
a6:44:87:dc:9b:4c:76:0a:a7:3b:ae:b5:80:d7:6b:94:d3:3a:
b2:59:98:33:6c:13:d0:e0:b3:ee:e7:1d:5e:5f:d8:1e:50:88:
f9:6e:37:19:48:48:9d:9b:15:5c:61:72:f6:5e:ce:70:34:d9:
8b:6d:b8:5c:d4:ba:9f:14:cc:d3:27:2d:af:44:a3:75:ee:74:
a5:eb:73:b1:e2:f8:73:17:f6:de:5e:61:96:54:5d:92:f7:26:
90:47:0e:58:ca:7b:5f:50:85:9b:65:c8:50:ce:68:c5:50:9a:
dc:7a:76:57:48:f0:a0:26:59:30:d0:81:88:18:b6:16:bf:86:
2c:02:d8:fa:4a:28:7a:ce:91:c8:64:0e:b6:64:5f:81:2d:29:
45:61:ae:33:f8:21:1c:c7:5e:33:c1:32:a4:45:26:cf:16:59:
3e:dc:78:7d:15:14:b9:1a:bd:04:65:bc:f4:cc:40:da:f9:3b:
65:fe:f1:46:ec:44:9f:ee:e7:fb:39:f4:0f:5c:36:e9:56:eb:
a5:1a:bf:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTjuaY+UJ34Hfxgf6H+yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh
NDFiMzUwHhcNMjUwODEyMjIwMjE4WhcNMjUwODEzMjIwMjE4WjAzMTEwLwYDVQQD
Eyg3NGVhYTAzNjhmMjg3M2ZlY2RjYjczYTZkZGU2ZjM5NjY0NDMxYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/fGxlQ/DaKyL3dczWA4z+lWqpgu
XwgbksPfo5b8w31bw2y7yBaXy6PRvnh3/rfBo82kmJ9jc1vgiXblUhQaGnBo7ncX
TU4uAPKUo1zX6LpsnxZo6IsMxTT8GEupVczx2JptQ1qnvuMcIgRay7/MvGRsBsPh
2Mf6APOr2X0jMJjLoNk+howup/7RHMKSzW7nyOyHSMAOUe6jRnJkAV/cHZkB6G7+
aV6kcHNE6c/ZZ2NOIFHlkHAekBmIMpFIgZf1TdyraguRyBzFG5IAbwXPQskJLCMG
kSr6ie8jiaOhO6HYNJF1HbBCHqEMYpouzmZhicJXaTDIEOJGi8uTCmPtTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTqoDaPKHP+zctzpt3m85ZkQxraMB8GA1UdIwQY
MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt
NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm
LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJrBPDth
zVGMJ0yVv8wQhb33qoQZlSrBt/Mzst5R1nu7a52TbV5CbXZQQ0qOVv4g9aXjvaux
pkSH3JtMdgqnO661gNdrlNM6slmYM2wT0OCz7ucdXl/YHlCI+W43GUhInZsVXGFy
9l7OcDTZi224XNS6nxTM0yctr0Sjde50petzseL4cxf23l5hllRdkvcmkEcOWMp7
X1CFm2XIUM5oxVCa3Hp2V0jwoCZZMNCBiBi2Fr+GLALY+kooes6RyGQOtmRfgS0p
RWGuM/ghHMdeM8EypEUmzxZZPtx4fRUUuRq9BGW89MxA2vk7Zf7xRuxEn+7n+zn0
D1w26VbrpRq/GA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:30 2025 by rpki-client