Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json)
Hash identifier: y6wqgV3tuFb6KER7Oi9fPzO26OOHFptgxwoCgLS/5bI=
Subject key identifier: 22:18:9D:C6:D4:96:3E:A8:13:42:79:D9:64:5A:4F:CA:2A:DA:33:66
Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Certificate serial: 019890DAE1D9E6AD24A0CD6DAC3593981EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 22:02:00 +0000
Manifest this update: Sat 09 Aug 2025 22:02:00 +0000
Manifest next update: Sun 10 Aug 2025 22:02:00 +0000
Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: xCtc98eknq/E2NIWU2tXGxdRqywuCXO4Gz8HYW3O+CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:e1:d9:e6:ad:24:a0:cd:6d:ac:35:93:98:1e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Validity
Not Before: Aug 9 22:02:00 2025 GMT
Not After : Aug 10 22:02:00 2025 GMT
Subject: CN=22189dc6d4963ea8134279d9645a4fca2ada3366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:8e:ce:53:2a:74:e5:3d:5d:ee:83:22:79:
77:07:07:9f:b0:53:4d:73:51:ca:a2:de:c3:09:b1:
a3:f8:63:08:a0:24:d3:b0:93:4e:07:e3:aa:46:32:
08:73:cc:0a:fa:bc:15:12:26:16:8a:13:bc:5f:42:
da:e1:a1:f3:86:ee:e6:2c:1d:4d:92:23:f6:bc:d7:
bd:16:89:dd:56:86:c9:e2:5f:76:89:80:16:ba:5d:
ac:10:2b:da:e4:d5:14:14:91:e3:68:6b:ff:3a:6e:
aa:a2:65:82:fb:f6:71:ad:e3:22:7c:70:85:63:58:
42:26:d1:91:31:57:b2:83:0f:4e:cc:2f:a8:81:95:
82:97:4b:5c:b5:fe:a7:9d:bb:03:ac:a7:5a:7f:2d:
38:c5:91:a8:58:6c:57:72:3a:14:95:07:34:92:75:
48:16:2c:0a:98:6a:f3:37:96:a5:f5:b3:61:8f:a9:
4f:06:24:ed:60:23:52:5c:42:6f:b5:bd:1f:9f:94:
a1:6c:62:8f:9f:75:c0:d7:d3:88:82:6c:78:1c:32:
a2:7c:f7:8e:3d:af:26:43:87:24:ec:8a:37:66:9f:
03:38:5f:13:03:e4:48:a6:d3:e4:d6:c8:b1:02:52:
bd:df:a2:65:60:1a:67:97:65:28:01:58:c3:b7:a0:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:9D:C6:D4:96:3E:A8:13:42:79:D9:64:5A:4F:CA:2A:DA:33:66
X509v3 Authority Key Identifier:
keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e2:ce:4e:be:bd:0f:c4:74:2d:87:ac:11:47:3f:29:bd:6e:
85:8a:af:e3:bc:a6:d1:3a:e7:58:44:de:e5:7e:11:4a:ed:be:
cc:af:a6:ae:15:9d:02:2c:ce:dc:1f:51:ad:42:61:db:e4:74:
5e:04:ac:ba:b7:9c:76:6f:19:c0:a8:e3:a4:81:0e:83:69:13:
b2:3b:eb:9e:04:e1:6d:fa:e8:2f:41:a3:e7:67:6a:36:2a:dc:
70:87:e0:b7:1e:8b:10:ca:25:04:55:37:54:29:44:1f:c7:49:
8b:fa:b3:5e:9f:2d:ae:6b:bb:ed:3a:ec:a5:ae:b3:f6:6a:4f:
ac:a8:9d:01:5f:07:2f:73:4b:6b:e1:5a:94:5c:2a:90:1b:7a:
39:62:94:5d:92:92:03:73:c5:cf:e0:04:e6:94:da:08:73:a1:
1c:2e:10:c2:e6:41:80:e3:7d:4d:30:a5:9b:ec:2c:c3:37:cf:
35:78:8e:28:f7:24:d7:9f:88:ad:2c:22:49:55:a7:6f:9c:8f:
61:c7:37:0d:55:65:53:a1:ca:41:5f:2b:74:b4:ed:d5:12:dd:
b9:18:6b:ef:43:a1:c1:5a:34:ce:08:31:ba:11:fd:38:a9:fb:
46:d8:94:da:d6:ae:fe:d1:3c:09:fc:15:4f:e8:cc:9a:0a:5a:
6c:e7:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:53 2025 by rpki-client