Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: bEbaOf6QCX9dO5y82VZHT5NjYEP4FUgIP3P4n75CUMc=
Subject key identifier: 65:DB:16:C4:B5:88:04:1C:0C:CD:55:07:69:A2:C7:98:2B:6F:56:B3
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 019896A63AB72E642A048A5426C49F19AA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0D3B
Signing time: Mon 11 Aug 2025 01:02:13 +0000
Manifest this update: Mon 11 Aug 2025 01:02:13 +0000
Manifest next update: Tue 12 Aug 2025 01:02:13 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: 8SwF8SMJDNXcxIeSFhsGO822Fby58eV6od1Ti0wcJaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:3a:b7:2e:64:2a:04:8a:54:26:c4:9f:19:aa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Aug 11 01:02:13 2025 GMT
Not After : Aug 12 01:02:13 2025 GMT
Subject: CN=65db16c4b588041c0ccd550769a2c7982b6f56b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:f6:bb:42:b2:0f:e7:d3:2e:3b:fe:95:dd:
87:46:46:ea:d5:ca:35:2f:d9:f1:52:4f:b4:ff:a4:
18:74:d8:c7:71:03:04:0f:85:dc:09:41:68:2d:95:
f8:e0:e3:52:81:86:69:ed:fb:1b:da:87:83:fe:3c:
52:27:11:c9:13:18:dd:59:91:f6:d5:4d:45:44:b1:
41:40:73:3e:b1:41:e7:57:1c:75:8e:84:da:ae:b8:
a0:31:66:28:d2:76:8d:38:fb:5e:86:c5:1a:8e:e7:
59:90:5f:83:19:c7:12:ab:2f:d7:3e:71:63:d2:f3:
53:06:2f:98:51:1a:5d:c2:87:13:bf:1c:ce:b6:87:
2d:64:d7:06:d8:3a:c9:ed:a7:55:6a:1d:98:5f:f3:
8e:94:de:d0:bf:47:6e:f5:51:51:d6:0c:50:1f:fb:
a6:fa:96:b7:9a:3e:aa:0d:0e:98:75:0d:97:82:4d:
9b:0d:bf:99:9c:d8:9f:44:38:11:a6:40:b2:4f:6f:
38:41:75:29:39:ea:81:9e:06:73:b4:ad:5d:93:52:
00:4a:ab:99:57:65:47:e3:4c:32:68:75:97:45:49:
e7:80:5b:eb:85:32:af:ea:3c:d8:db:23:af:b2:96:
b8:63:2b:da:03:39:7f:37:2f:e3:be:d2:05:0e:3c:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:16:C4:B5:88:04:1C:0C:CD:55:07:69:A2:C7:98:2B:6F:56:B3
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:9c:d2:7f:c5:e5:71:dd:b0:b9:2a:2b:40:c3:71:b4:f4:
81:5e:81:ab:4b:08:1b:3d:5c:7e:77:ae:f6:ef:97:9e:19:59:
0d:40:8c:4d:f9:22:38:2d:df:1d:80:55:d0:e7:65:d3:6d:46:
0f:65:c1:35:c0:5d:82:6d:2f:3d:c5:a8:da:42:14:eb:ef:d6:
5e:1a:9e:1d:e4:0d:15:f7:97:4d:ae:b3:7e:9d:a2:15:f2:27:
8e:e5:a6:4d:a0:fe:f3:02:8e:30:eb:a5:2f:77:df:97:c1:2c:
b9:c1:0f:73:eb:96:71:54:e4:c4:50:29:cd:e3:d6:28:be:04:
d9:2c:0e:f8:2c:fd:f3:0f:36:b4:2a:e1:37:d8:b4:c1:84:30:
71:fe:81:24:e9:86:a3:91:4d:2a:d9:8a:ca:f4:8d:dc:07:6a:
9a:fe:13:8e:97:4d:8f:a3:10:7a:ac:7f:5c:31:0b:e8:d2:da:
bb:8c:e9:94:d6:12:21:8d:c3:66:65:c8:16:0a:dd:8a:30:32:
32:36:57:8c:3f:46:00:4e:0a:65:a9:71:06:92:d4:1b:59:96:
ab:f1:65:6c:38:c5:af:b7:da:41:a2:6a:28:84:f8:4d:dd:20:
44:82:31:43:9c:cb:b8:60:bb:83:c8:28:b1:5a:43:32:43:df:
92:c9:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:07 2025 by rpki-client