Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: F/e30wEZSSNI18i1math0So4O7TAh9CY0xIclha/i0E=
Subject key identifier: 03:A9:07:02:B2:A0:84:F0:31:E6:47:64:54:D4:55:FC:76:DD:A7:1E
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0198A128BD5C43296FB05C4C2E0D2026D52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1120
Signing time: Wed 13 Aug 2025 02:00:58 +0000
Manifest this update: Wed 13 Aug 2025 02:00:58 +0000
Manifest next update: Thu 14 Aug 2025 02:00:58 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: 7TU0Xw1pjjQiRy2DWS6/tni0MwsXV9MLq77twHmyL3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:bd:5c:43:29:6f:b0:5c:4c:2e:0d:20:26:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Aug 13 02:00:58 2025 GMT
Not After : Aug 14 02:00:58 2025 GMT
Subject: CN=03a90702b2a084f031e6476454d455fc76dda71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:77:99:68:d2:b5:bb:a4:1c:09:d6:7a:f6:
72:1d:30:68:01:92:d9:e4:a2:21:cc:72:67:5c:3c:
ad:7c:26:f1:a6:21:ae:1e:71:95:e4:20:7f:78:3f:
85:25:7d:4b:a6:6e:f1:f8:c7:1c:27:e0:a3:36:d5:
71:48:ac:e8:4d:1f:14:01:82:05:b6:f8:b8:07:a3:
e7:24:90:3c:69:70:5b:3f:eb:df:7f:82:06:8b:95:
49:c5:70:2b:de:8c:8e:e2:54:2b:ec:21:61:35:5d:
6b:81:f2:ee:a6:25:fb:a1:ce:6a:78:b6:b9:c4:a1:
99:2e:eb:71:0a:72:e2:f5:2d:67:61:f8:5a:de:ba:
7f:7b:18:90:58:e1:9c:3b:ea:8d:a4:6d:41:53:b1:
84:17:d0:8f:65:63:9c:ec:80:95:e7:29:b8:b2:ec:
ab:ce:4e:a1:04:9f:ba:a6:7b:c7:5f:91:9a:8d:6d:
25:f0:3c:64:fa:b6:c4:b5:57:d0:c8:ff:01:4c:f9:
5c:0a:35:84:12:57:42:22:37:38:34:72:11:f0:70:
4f:e7:dc:35:d0:30:da:67:f7:0c:9d:8d:c6:7a:9a:
11:b6:97:a2:05:ce:4e:ec:12:69:4f:8e:d9:34:dd:
96:7e:a2:b9:5a:61:ec:1a:f0:12:76:f8:ce:35:ce:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:07:02:B2:A0:84:F0:31:E6:47:64:54:D4:55:FC:76:DD:A7:1E
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:06:96:09:44:1d:1b:42:a5:43:c2:be:4b:86:f9:6e:4a:
fa:2c:7e:99:3e:d7:13:b8:f8:ea:98:15:99:c5:fc:bc:ca:00:
86:bd:db:49:6a:99:b3:80:b1:39:e0:d0:95:1c:8e:93:3e:7f:
4e:24:c3:e3:53:ad:52:9e:6e:f6:5e:ba:d4:52:41:de:12:41:
79:96:0d:82:66:f8:a8:5d:be:95:ee:95:96:4a:f2:47:3a:9f:
14:3b:b4:3e:4c:3a:23:0e:d0:5e:02:84:c7:97:fc:c3:b2:ac:
f6:f1:00:66:6f:cd:6b:9e:af:16:54:bc:f7:9e:74:dc:82:78:
5b:ce:bb:58:d3:72:71:a5:52:cd:e3:fc:25:7f:02:4b:08:12:
5a:ed:e7:37:fd:50:e2:e0:41:08:64:2c:60:e3:c9:71:d8:f4:
7b:e5:bd:28:05:1b:0b:66:ef:47:d9:c1:0b:43:55:8e:50:4b:
4c:d4:0c:42:e5:0d:88:3d:bd:df:b7:c9:8e:ac:b2:c4:e6:d5:
e5:6a:e2:13:3b:12:f4:1c:12:3e:28:72:1a:e1:dc:0a:c3:8e:
ce:e6:d2:3c:c1:f2:3f:fa:57:4f:5b:5a:34:4e:a4:21:49:56:
f7:7f:a9:64:4a:46:be:c7:35:f5:f8:90:1a:c7:79:2b:a3:88:
60:65:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:38:07 2025 by rpki-client