Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
File: oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json)
Hash identifier: HZEszxMKQY4z33RU75B+P9yEpvW/v2xWLEczHXmbF1o=
Subject key identifier: F6:8A:EE:57:CA:D5:43:9C:53:CF:91:67:2E:0A:DF:4B:54:54:F0:14
Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
Certificate issuer: /CN=a223d15344c02a551e63f831c604f80dbec4ba10
Certificate serial: 019896A55609A6924F2BE8CEBDFD937B47AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
Manifest number: 0A7E
Signing time: Mon 11 Aug 2025 01:01:14 +0000
Manifest this update: Mon 11 Aug 2025 01:01:14 +0000
Manifest next update: Tue 12 Aug 2025 01:01:14 +0000
Files and hashes: 1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: Q+QbXo87UN8W7uQRtYpwpkXQYGhOrRb+s/Sg9HyndyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:56:09:a6:92:4f:2b:e8:ce:bd:fd:93:7b:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10
Validity
Not Before: Aug 11 01:01:14 2025 GMT
Not After : Aug 12 01:01:14 2025 GMT
Subject: CN=f68aee57cad5439c53cf91672e0adf4b5454f014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:e6:bf:a8:0d:a3:9c:b6:a9:0f:9a:08:90:
dd:42:d9:2d:ff:d9:82:49:c3:c6:10:15:8a:7f:28:
be:35:6a:ec:3c:6d:57:32:7c:75:0f:71:02:48:de:
08:3b:13:57:57:6d:07:e2:27:31:98:c9:54:b7:90:
3d:68:eb:74:69:d1:35:60:c7:ff:16:c4:be:a7:5e:
2f:49:b6:0d:5a:f2:d9:34:a2:a6:cb:85:0f:9f:53:
22:7e:df:8e:4f:c3:6c:ae:ce:ec:8e:21:1d:f7:84:
d1:a0:ea:12:4e:76:3e:69:f7:27:37:c5:d7:63:c3:
c4:cf:1d:67:77:55:a3:d5:74:70:83:58:0a:92:bd:
3b:63:a8:cd:90:ff:56:2b:f9:de:9f:05:7e:62:fe:
31:ae:c9:29:80:cb:b3:c6:2a:31:0b:01:83:d2:c6:
a7:a4:78:f7:30:3f:1d:69:a3:29:60:82:38:82:b3:
c4:bb:83:00:fb:5c:e6:30:6f:e9:c1:99:10:9f:5d:
19:f0:18:42:b5:9d:44:32:5c:8d:a2:7a:d3:b0:9f:
84:4f:5b:a5:52:86:7f:c9:e8:03:8e:b3:3e:76:91:
08:0e:d6:a7:a3:9d:64:35:ae:d4:e1:ee:a6:9b:e7:
1f:e1:f1:dd:91:60:06:9e:4d:8d:00:40:d5:37:da:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:EE:57:CA:D5:43:9C:53:CF:91:67:2E:0A:DF:4B:54:54:F0:14
X509v3 Authority Key Identifier:
keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:31:10:86:c9:cb:12:68:0e:33:d4:a9:40:d6:6d:1c:2b:
3f:58:52:c9:21:28:b8:bb:da:e2:7c:f9:62:e6:4d:ba:ad:1b:
0f:e6:c7:5a:fb:86:93:82:0e:34:79:c2:2f:81:47:56:74:3f:
ff:e7:0c:af:da:37:a4:03:31:36:96:bf:fe:6c:0a:34:5c:f8:
78:1f:c2:a5:35:68:03:84:8a:57:b8:a8:a3:4c:cf:c2:bc:d0:
61:bb:a8:c8:1c:4e:94:58:5e:9b:07:5b:b0:f0:76:a9:f3:72:
98:cf:41:6d:10:02:43:c7:9d:21:42:a7:b7:50:e9:aa:87:f1:
2a:78:e6:09:5e:9d:eb:e1:c3:7f:ce:b1:8d:f7:7f:e3:6a:33:
b7:f9:77:22:f8:dc:c8:ef:cb:96:1c:14:41:f5:65:b0:6b:4f:
39:b4:67:de:5b:c4:71:0b:26:47:a9:09:45:1d:35:7b:73:50:
9a:d6:23:7d:4a:86:2e:f8:dd:6d:2a:90:6b:40:dd:3b:ba:2e:
06:07:e2:e2:03:98:d8:7b:44:e3:d7:c4:57:d2:75:15:6f:ae:
59:e6:b5:ab:6f:91:3d:07:22:d0:7e:c3:9c:f1:d6:fb:49:4a:
df:46:e8:a5:d2:0d:f1:6d:54:90:0c:84:95:09:af:c2:36:f4:
71:c6:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:28 2025 by rpki-client