Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: AXLwOXo3yRJxhMRr5K2pNTgYu3h7j1TQAAm50yFmnXM=
Subject key identifier: 7B:2E:5D:A1:D4:10:D4:B6:C2:B6:25:E4:C6:AC:82:E7:04:30:E2:57
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 01988166AC9D00990409E9268C1D3E31B89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 22:00:46 +0000
Manifest this update: Wed 06 Aug 2025 22:00:46 +0000
Manifest next update: Thu 07 Aug 2025 22:00:46 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: sSaK6v/YqC9+doB2EZvNjbA8j1/7oI8muXLF0rKif7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:ac:9d:00:99:04:09:e9:26:8c:1d:3e:31:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Aug 6 22:00:46 2025 GMT
Not After : Aug 7 22:00:46 2025 GMT
Subject: CN=7b2e5da1d410d4b6c2b625e4c6ac82e70430e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:2c:24:32:b0:88:07:e7:70:c1:97:e7:6a:
53:53:b9:00:09:2d:05:1f:44:ea:41:4e:a9:19:60:
05:6b:4b:00:22:5e:a4:ae:09:7f:de:41:00:04:33:
94:9a:28:5a:7a:76:9d:33:14:89:cd:b9:5d:18:1e:
b5:93:c2:5a:68:d7:00:81:ae:19:47:87:1f:a5:e7:
03:2e:4d:9d:c7:79:a7:dc:84:23:79:77:28:a2:89:
e3:94:0c:f0:44:1b:29:b7:26:c9:fc:a6:ff:c8:5a:
f4:45:8f:04:6f:4a:e0:c8:9d:ef:c8:f6:22:64:c6:
91:54:0d:9e:38:2c:01:dc:b1:82:21:ea:d3:54:78:
f5:18:ee:f1:55:8f:0a:d4:ed:46:10:c6:88:f3:09:
6d:b2:39:2a:35:f3:4d:cc:0b:24:26:de:18:c2:41:
33:2d:4d:5a:d3:2f:5c:3d:f4:c0:c0:12:99:68:87:
b6:86:ea:af:86:07:3c:cb:fb:54:82:6d:5f:13:7e:
53:55:98:bb:4f:49:03:7e:2f:41:cd:4c:6a:a8:3d:
fa:80:34:61:73:a5:ff:41:c7:50:53:3a:9f:05:ba:
e0:4f:38:1d:cd:4c:f0:b8:49:ad:ae:cf:a4:7f:82:
7a:73:b6:48:43:95:c0:90:de:c2:fe:2e:f1:c9:ab:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:5D:A1:D4:10:D4:B6:C2:B6:25:E4:C6:AC:82:E7:04:30:E2:57
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:1f:65:ea:5f:f8:5b:63:4e:b9:32:9d:b9:5a:47:78:b0:
a6:18:4c:12:9f:79:00:68:9c:ec:6c:7f:b7:24:d1:93:85:00:
9c:91:f8:c0:b2:42:8c:6b:54:bc:99:ba:ba:d1:6f:ff:1c:18:
46:17:d4:5a:3e:21:c3:41:2c:ed:12:78:15:5e:9a:d0:08:7b:
f4:63:b9:b5:cb:0f:3b:87:1b:cf:6d:09:84:e6:1d:0d:00:bf:
73:13:f7:9c:ff:e1:cf:1b:3f:c6:e9:a9:87:17:18:db:0a:2d:
5f:d8:91:f0:69:78:fc:8f:ce:ba:ff:57:d5:ec:73:67:ed:2c:
4b:e0:77:ad:bb:27:ba:1d:f0:45:58:0c:b6:a5:33:74:fd:92:
0c:db:93:82:5a:73:34:0a:75:f4:d0:44:a1:f1:f2:55:54:55:
f0:6c:16:7c:1a:5f:68:1c:c7:5a:f2:1d:7e:1b:e8:28:2b:a6:
7a:3c:37:df:77:bb:e4:26:0c:a9:de:1c:15:49:72:be:98:87:
3e:66:a4:32:df:f0:59:8b:31:8e:ec:e1:d5:a8:2d:0b:9b:03:
d8:f3:ad:26:97:d0:71:c7:e5:2d:fd:85:ae:af:be:d3:b5:09:
99:fa:18:a9:0a:5d:fe:11:71:43:ac:8b:06:58:9f:96:59:5a:
e6:ce:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:03 2025 by rpki-client