
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
File: c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json)
Hash identifier: 3dvBMq2wFD90Tb8n/8Yqy0jZayasRPjEz3922IjUCnI=
Subject key identifier: 8F:50:41:92:A9:BE:AF:85:4E:1E:2C:6D:6E:A4:5D:D5:2E:9C:05:CD
Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
Certificate issuer: /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Certificate serial: 0198745046507948A31F6D8A1156ED0C6F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
Manifest number: 090A
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: mQZJ3xUWDUsgfBRiBj+fJU/2tXeKJQQ3r2Dzr4BlVog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:46:50:79:48:a3:1f:6d:8a:11:56:ed:0c:6f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=8f504192a9beaf854e1e2c6d6ea45dd52e9c05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:30:99:09:06:fa:4f:14:55:ae:7b:38:e3:
ec:97:e4:87:ad:6c:28:80:a3:03:b7:ce:d8:29:47:
1f:ff:ec:fd:16:2a:fa:37:ea:2c:34:a0:22:8a:72:
f1:ce:28:e4:37:96:77:0b:23:a9:4d:68:9e:10:63:
ee:f1:5f:75:56:18:9f:b9:1d:77:bf:46:76:3c:aa:
b7:8a:fd:c4:b9:39:35:f4:25:5c:0e:37:b2:76:6a:
31:03:9b:e8:f3:96:f2:67:ad:b6:89:1c:00:27:e2:
4a:f3:c3:57:26:11:46:e7:79:ea:ab:3d:4b:a6:c1:
45:34:64:18:68:62:c7:45:72:76:2f:2a:59:f5:2d:
ea:75:17:85:fe:fe:62:63:b5:1d:da:50:f4:0b:6d:
37:48:27:56:78:db:53:90:31:2c:d1:78:7e:1b:db:
82:a9:1c:89:29:19:28:7e:d7:fb:7d:25:28:47:77:
c0:e0:1c:9d:a5:dd:f2:53:be:ea:b5:bb:4a:b8:33:
e3:95:d5:0c:8a:04:19:ac:6f:d0:63:06:91:a5:2b:
b6:19:b9:63:a9:d4:49:46:ad:82:c2:7e:3e:e1:87:
61:f7:0b:80:73:95:0c:9f:40:0b:6c:35:d7:6a:a0:
0e:52:f6:e0:37:cd:d3:ce:38:a6:af:d8:bd:94:ea:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:41:92:A9:BE:AF:85:4E:1E:2C:6D:6E:A4:5D:D5:2E:9C:05:CD
X509v3 Authority Key Identifier:
keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3a:05:91:c3:13:ca:3d:ab:fd:c5:76:7b:80:a1:d5:33:10:
ce:93:0f:a2:69:47:7e:e6:24:b8:08:f7:3d:cb:99:63:2a:ae:
47:eb:f9:1f:31:56:96:2e:9f:b2:95:ed:8f:fd:50:84:79:03:
38:e8:57:7f:53:3f:7e:33:be:9d:bd:da:24:a3:1c:61:31:e4:
58:ec:63:4c:c3:7d:2b:61:05:25:13:63:da:f7:93:a5:9b:2c:
10:39:84:5d:10:e3:86:57:e2:01:0c:f2:8d:f9:9c:d6:f0:e8:
09:11:4d:5e:a8:aa:a6:a2:6d:84:2c:60:60:6d:23:a2:e8:45:
85:d5:56:e9:09:46:2e:d8:47:0d:45:fb:10:c0:82:7b:44:9b:
7e:b0:21:9b:b8:2e:c6:b7:2c:99:88:58:1d:00:77:3c:b0:28:
af:0d:2b:5d:72:05:38:b1:9d:59:32:42:a9:44:f3:07:ff:94:
86:d3:09:48:81:e9:18:78:5a:c1:2f:62:cf:02:c0:8d:df:be:
33:2b:8e:64:93:26:ef:41:f1:3d:89:54:58:49:27:bb:56:94:
3d:98:bf:ed:b1:bd:67:bc:fa:f3:30:49:34:59:8a:78:9e:c5:
09:83:ec:c0:23:a4:bf:7e:55:dd:23:2a:9c:62:9f:aa:32:6a:
1d:70:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:20 2025 by rpki-client