
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: QbGW+3oGnremCp/r3S7pPOppWt/hg0N3bkpXqoYAo3k=
Subject key identifier: 42:8C:40:BE:A8:3D:25:35:E3:4E:E3:6C:38:64:76:0A:62:DF:B4:64
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 01987E9D04DE3D2D9374D97F28702E88E489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 09:01:16 +0000
Manifest this update: Wed 06 Aug 2025 09:01:16 +0000
Manifest next update: Thu 07 Aug 2025 09:01:16 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: VSJ8GCswkVqDkxY2xWeSFSkAdqWTJNo808i1y+vvLN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:04:de:3d:2d:93:74:d9:7f:28:70:2e:88:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Aug 6 09:01:16 2025 GMT
Not After : Aug 7 09:01:16 2025 GMT
Subject: CN=428c40bea83d2535e34ee36c3864760a62dfb464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d2:01:ed:ae:b2:2c:d9:31:25:66:20:e6:24:
83:b8:cc:b9:c6:a5:1f:11:f7:85:16:48:ce:ad:2b:
34:b3:1f:28:92:9a:90:5e:5d:0b:51:66:49:d0:b7:
b0:f5:b2:a7:28:9f:fc:91:33:d4:85:c9:95:79:e4:
5a:6b:ff:f4:0f:5c:a6:94:d5:95:4f:bc:70:c9:2e:
4a:ff:25:df:81:b9:84:9b:f0:0d:9f:7e:9a:2d:e7:
e4:0e:c3:15:4e:67:d7:12:75:3e:a6:28:8c:d4:54:
66:3b:ad:06:c6:2b:77:49:01:d9:81:e7:58:8b:0b:
b3:a9:b5:dc:cc:f0:c8:f3:d7:62:70:c2:08:0c:ad:
fd:bb:6a:14:d5:4c:96:ad:46:85:7b:fd:62:bc:f4:
f3:45:d9:76:55:5f:0e:2f:c8:9b:06:eb:15:45:1f:
32:b9:6f:c6:1d:16:2a:a1:2c:84:99:d0:c8:6a:8f:
85:a9:16:7b:83:24:d1:2b:11:e1:40:e9:e9:3b:ac:
b2:87:3b:08:c5:6e:39:7a:60:7b:56:a1:35:aa:9a:
9b:6b:ee:73:e1:d6:42:9c:1d:01:a3:1a:c9:50:d9:
5a:ff:50:d1:f5:82:27:20:a7:3e:2f:80:14:e0:c9:
01:6d:9c:6d:0f:b2:85:f8:93:09:35:5c:b0:18:e5:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:40:BE:A8:3D:25:35:E3:4E:E3:6C:38:64:76:0A:62:DF:B4:64
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:da:17:1d:c5:cd:61:19:d1:f7:e5:36:76:1f:6b:22:fb:
5c:ef:12:60:0c:8a:d9:fc:c6:56:5f:6d:29:b5:ae:e8:24:c6:
96:1d:0d:99:78:38:17:71:5a:cc:7c:6c:8e:3e:41:ed:c8:3f:
f6:ed:3a:27:d7:3c:75:48:36:b0:a4:de:bf:b0:34:51:e4:8c:
85:e7:f7:f6:9a:8a:7f:d5:ad:03:cf:b2:28:93:ab:da:b2:18:
68:55:13:73:62:16:75:be:f7:1b:30:8f:0b:8c:72:08:46:3e:
89:eb:ea:50:49:bf:a2:09:09:12:df:07:9d:66:ac:81:c8:b0:
b4:e7:36:d6:cb:16:60:e3:9d:3d:6d:a4:48:5e:1c:23:87:35:
2c:ea:12:fe:9d:23:0a:28:8e:b2:e6:03:6d:9c:17:35:4a:39:
70:9d:93:bb:41:9c:fa:9e:6a:3f:d5:2a:67:ba:bc:93:25:14:
d9:a7:db:ed:2c:1d:76:e8:27:1e:4b:8f:a4:7e:a0:b0:78:78:
bc:7f:4c:63:57:d3:37:b9:e4:29:5c:6a:8e:a5:de:87:15:34:
c9:5c:14:91:8e:ce:3a:e8:90:d7:57:0a:ee:0d:56:08:69:b6:
fd:ff:26:ef:b8:0a:88:52:ef:c5:9d:29:15:e5:e9:5f:6c:a8:
e9:80:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:51 2025 by rpki-client