Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
File: Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft (raw, json)
Hash identifier: a6MYjl65+PMOuN/9PvqlP9bD6OUWdiJKXgn6S9v5lCQ=
Subject key identifier: 51:A2:08:01:66:68:FA:56:2D:89:22:79:CF:7C:0B:08:5C:19:04:CD
Authority key identifier: 3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33
Certificate issuer: /CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
Certificate serial: 019896A68FA999BD3EFCA0E6E45BDE7B0D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
Manifest number: 0A35
Signing time: Mon 11 Aug 2025 01:02:34 +0000
Manifest this update: Mon 11 Aug 2025 01:02:34 +0000
Manifest next update: Tue 12 Aug 2025 01:02:34 +0000
Files and hashes: 1: Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl (hash: NRfbqSBIpY2Ru/9DISRiZsiV6WGeeE1tai7PccRbYB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:8f:a9:99:bd:3e:fc:a0:e6:e4:5b:de:7b:0d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
Validity
Not Before: Aug 11 01:02:34 2025 GMT
Not After : Aug 12 01:02:34 2025 GMT
Subject: CN=51a208016668fa562d892279cf7c0b085c1904cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:eb:8e:3d:c6:b6:92:57:34:93:79:00:f5:
f6:b8:59:97:5e:e4:32:8d:4c:4b:ef:98:ed:4b:72:
b8:e9:a2:94:2a:f6:a9:db:ef:e3:0a:47:17:03:6e:
ac:92:27:c5:75:08:21:d4:70:41:e5:4e:a9:86:fd:
98:26:6a:92:ab:cf:8b:76:fb:ad:7e:fe:be:a5:d8:
c3:bd:f9:2d:06:db:12:b4:c9:7b:5c:da:08:2d:96:
3e:c3:25:1d:6a:9d:17:68:15:d4:6d:fe:69:ae:9b:
db:8e:c6:d4:02:75:db:4e:24:68:37:e9:0d:5f:09:
79:19:5a:f0:67:a6:8a:10:f2:c8:5f:67:85:4f:d0:
3e:7a:aa:9e:cf:9f:f2:df:9c:77:d1:f0:d1:e2:b2:
4b:b3:79:b9:b9:ed:e8:db:77:58:ec:cd:f0:ff:5b:
20:b5:07:c8:25:3a:20:d5:b1:bd:5e:70:95:5e:e5:
bf:8d:16:e6:6d:25:2a:1b:8b:c0:8d:ea:1f:c2:91:
30:ab:40:15:47:d9:f4:ce:24:13:ae:8e:45:f1:8b:
85:bc:77:c7:36:2b:f4:da:1d:c3:dd:60:64:eb:e5:
29:19:9e:62:da:fb:17:21:40:d3:65:07:4c:80:be:
37:e6:7f:3e:00:ae:1c:d7:5b:75:fc:d1:6c:38:b0:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:08:01:66:68:FA:56:2D:89:22:79:CF:7C:0B:08:5C:19:04:CD
X509v3 Authority Key Identifier:
keyid:3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:80:0e:23:67:84:fb:f4:af:ed:40:7e:34:20:83:87:87:
4b:c6:34:25:89:f5:54:7a:eb:41:e4:13:96:d9:9b:b0:d2:cf:
71:61:dc:96:8c:82:bd:9d:28:7b:9b:1f:1d:7a:08:ae:51:47:
1f:29:90:74:32:35:6e:ab:5a:ad:11:d8:a7:ca:90:1a:4e:bc:
4c:c1:1f:ff:3a:65:09:43:43:1b:2f:8a:c7:c3:08:63:2b:ca:
3a:d6:83:a6:23:a7:ba:d8:a2:45:71:d5:09:8f:2d:2d:32:ba:
2b:6e:21:94:51:23:a9:68:5a:09:69:2c:e8:bd:d2:24:cb:4c:
de:96:63:01:ef:de:d9:00:ba:a0:a7:41:fd:47:2e:8a:43:cd:
f3:43:17:de:19:95:6a:dc:68:4a:26:db:46:05:da:42:5a:13:
93:17:ca:c2:14:a6:91:67:ee:6b:40:bd:a1:42:33:08:17:05:
8e:92:ec:78:4a:7f:df:95:2d:f3:8e:b5:cb:38:bb:11:4b:16:
9f:21:a9:45:4a:73:6b:fc:5a:b3:63:7e:4b:9e:b3:e8:08:45:
32:f4:1e:ad:8a:34:01:86:14:3c:86:f7:25:92:e2:96:fd:5b:
43:d5:df:77:3b:c1:10:18:ea:af:7b:ea:e6:d1:b9:32:46:0b:
d7:9a:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:48:54 2025 by rpki-client