Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: rpQQTQQzoHVqfCd6sTdGEtvdQKkX5BH4c3Zr9Z7bNJw=
Subject key identifier: 0B:9F:0F:B2:72:75:43:5C:53:51:6C:08:54:42:BB:05:CD:F4:F2:03
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0198A04CADADEB3EF5A2D3FE2B2A8B9FAE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 11AC
Signing time: Tue 12 Aug 2025 22:00:36 +0000
Manifest this update: Tue 12 Aug 2025 22:00:36 +0000
Manifest next update: Wed 13 Aug 2025 22:00:36 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: n8UwMmMl8GA1jNarNsJlloRa55xdULfpgd4mPidO+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:ad:ad:eb:3e:f5:a2:d3:fe:2b:2a:8b:9f:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Aug 12 22:00:36 2025 GMT
Not After : Aug 13 22:00:36 2025 GMT
Subject: CN=0b9f0fb27275435c53516c085442bb05cdf4f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:b4:c3:5d:ea:47:82:d0:ad:e4:3a:09:47:
63:53:42:a7:af:66:6a:7d:31:8f:17:0f:4b:93:6a:
00:18:8a:46:82:54:77:f8:35:32:77:01:88:b5:5d:
d4:57:c3:d5:98:79:84:d8:2c:43:46:e9:26:d2:41:
0d:e1:06:c9:51:cd:3a:32:71:44:35:54:33:76:45:
fa:50:c8:c4:cc:e3:eb:1a:cd:60:0e:80:83:75:93:
5e:14:85:38:a0:d0:fe:81:1c:1f:98:b2:32:25:6d:
64:bf:b1:48:1a:6d:ac:cb:56:74:ae:53:d1:fb:d9:
62:b0:b4:b7:9a:f9:cd:8c:72:7b:d2:9a:3f:ed:e3:
a7:c4:b3:59:c5:66:7c:44:ab:33:71:d3:f8:45:7f:
dc:75:0c:ac:dd:63:ea:e0:05:86:d5:3b:a5:6a:1e:
af:c1:15:aa:03:39:9a:05:bf:d4:fc:ab:89:50:d8:
ab:3f:6e:f3:dc:db:28:66:6d:b2:fd:33:41:b8:13:
81:15:3c:41:c6:33:7c:1e:3e:49:42:63:fc:5e:38:
d7:c0:31:12:c7:4d:f7:4e:38:e5:40:fd:03:c2:18:
b2:45:46:fa:f5:f1:d3:c3:76:1b:75:e5:4c:e3:fd:
bc:95:49:1d:3d:b1:3d:b9:44:41:6b:4b:23:ec:68:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:0F:B2:72:75:43:5C:53:51:6C:08:54:42:BB:05:CD:F4:F2:03
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:95:e9:4b:6f:8a:37:bc:52:ff:ff:fa:5b:99:99:7e:33:51:
da:d0:ec:44:45:3b:37:f8:22:c5:37:43:2d:91:d9:9e:3d:1f:
32:73:c3:c0:56:76:81:f6:26:cc:ac:ca:e3:4c:7e:f2:eb:fc:
11:d7:6c:cf:7c:5d:f9:a2:12:98:8f:c1:b3:8b:eb:93:e5:4a:
bc:6b:c8:b1:2a:e2:aa:b3:41:c8:a2:a6:a1:cc:d3:87:54:a1:
88:c8:9a:34:e4:08:94:1c:31:1b:57:66:d2:06:93:48:ec:7e:
a9:fd:28:37:bf:7a:79:d6:49:b8:35:20:b4:94:b7:68:cf:8e:
b6:5d:fd:e5:51:31:0c:f2:ce:9d:78:93:6e:00:98:99:8f:59:
a9:ec:c1:e1:f8:8d:68:2c:96:db:a9:1a:46:c1:de:3a:1b:d2:
13:46:16:59:58:6f:bb:22:8d:38:0f:5c:6b:98:e8:7b:a3:e3:
61:62:d3:7b:e0:90:02:1c:bf:24:52:9a:e4:d7:78:7c:a1:35:
12:cd:1c:4f:f5:30:2d:cd:d3:c8:fe:17:8a:a6:12:eb:33:15:
96:fc:6d:8d:bc:33:16:fb:4c:f5:5b:b2:38:d5:6d:7a:10:2e:
e7:4f:03:75:af:ee:d4:0d:ee:f9:01:cc:58:87:c4:47:c0:23:
54:86:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:10 2025 by rpki-client