
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: zgGyGd6tImwgFIBQ76H2hApN0+i+CbnUqpONN2FKrHQ=
Subject key identifier: BE:7F:A2:20:74:A4:D7:C7:C0:7F:9F:20:C5:96:7F:3A:F7:E6:0A:DA
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 01988B0F4CFE534DC98133DD516FD3E774F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 19:01:32 +0000
Manifest this update: Fri 08 Aug 2025 19:01:32 +0000
Manifest next update: Sat 09 Aug 2025 19:01:32 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: vVOiom9nLXtt9LZY3gNpELSJc5K5OwWZN1vMaMsfIi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:4c:fe:53:4d:c9:81:33:dd:51:6f:d3:e7:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Aug 8 19:01:32 2025 GMT
Not After : Aug 9 19:01:32 2025 GMT
Subject: CN=be7fa22074a4d7c7c07f9f20c5967f3af7e60ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:85:e6:b7:12:68:45:c8:91:e1:32:0f:3f:
76:44:dc:f2:f3:ca:89:6a:d2:b4:d0:cb:3c:ce:7d:
2b:a3:32:b9:79:59:d3:a5:3c:74:c5:34:29:1f:14:
70:51:a9:dc:bd:6b:3e:97:b7:8b:ae:f8:ed:55:1b:
55:19:ca:e6:33:22:e7:67:6f:8f:e0:2d:25:9f:92:
49:75:64:ed:d6:28:e3:d5:42:bd:03:d7:f8:09:68:
c8:ad:9f:90:3e:37:7d:1e:49:ef:16:a7:85:28:d1:
58:ce:f1:60:b2:6b:83:76:3a:2f:3e:1f:81:68:66:
46:88:d1:8b:10:84:3a:79:0a:84:da:eb:0b:99:08:
41:72:e3:77:61:f8:49:62:f0:81:49:a6:b8:00:5a:
e2:75:12:3e:ae:d3:ac:e9:97:c0:6a:86:91:8c:31:
0d:d7:42:60:f5:8b:4b:ab:9f:f0:59:b0:59:d5:7a:
2b:0c:18:72:4d:ff:8d:ea:6e:b9:32:49:17:92:72:
d7:86:8b:ff:d1:99:a7:ce:86:c5:55:a1:74:fa:f3:
b4:bf:59:67:31:e6:19:85:53:24:d7:f4:da:25:0b:
3c:f3:36:94:99:f6:48:e8:65:b3:92:90:04:20:8d:
f4:d1:95:c6:40:48:19:d8:f2:e9:c3:a4:c0:c2:95:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:A2:20:74:A4:D7:C7:C0:7F:9F:20:C5:96:7F:3A:F7:E6:0A:DA
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8d:50:d7:fa:b2:36:2b:35:68:6f:56:d2:40:37:15:0b:d2:
d6:9f:f5:2c:12:a1:50:b8:43:f4:2c:db:87:9d:85:59:a2:d2:
a2:5f:c3:39:c7:8a:42:13:19:81:fa:7d:ee:24:49:3e:67:df:
a6:10:0d:b0:16:51:f3:1a:71:e3:ac:3f:b8:e4:b7:f2:b4:42:
63:d3:f9:a7:13:e7:7a:ea:84:2b:3b:9a:1d:96:0b:83:68:af:
17:59:2c:8e:e8:52:97:7e:c5:82:cf:3e:33:bf:3e:8d:39:3b:
2a:ba:58:82:45:29:fb:c3:e5:19:c1:0d:37:94:83:d7:bc:16:
2f:e5:ca:18:ec:e7:9c:8c:9d:54:cc:25:82:d7:b9:78:ea:8f:
7f:0c:35:ee:45:4d:c3:d3:ae:6e:15:7f:6a:88:19:cc:73:ae:
97:49:95:aa:d5:3a:0e:a9:13:1c:9c:d3:b0:27:ae:a7:3f:8b:
49:0e:27:3f:3c:d9:ae:0b:f4:24:6d:ff:cf:a9:14:7d:7b:58:
03:80:10:cf:52:f6:1c:d6:0e:47:00:4a:4b:df:cd:64:b6:36:
dc:17:2d:7d:31:5f:5f:af:39:db:1a:9e:75:83:e9:90:fd:1b:
7d:64:0b:96:0b:c8:20:ee:2c:6e:8e:2f:c6:0e:18:55:a2:6f:
a5:d5:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:40 2025 by rpki-client