Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: 8Z//ibUjkgbT1eG7lAZBePLQGf2kBn5B4P/xwrSpkC4=
Subject key identifier: 72:15:AB:54:C7:38:AC:E7:3A:2C:FD:19:C9:5A:FA:0B:B6:C7:2A:4A
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019853B1F5C91A92652D344A15FB6D14D4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 0357
Signing time: Tue 29 Jul 2025 01:00:28 +0000
Manifest this update: Tue 29 Jul 2025 01:00:28 +0000
Manifest next update: Wed 30 Jul 2025 01:00:28 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: gljnqRc1aHtjafA3VWHfRQBiQ7Zt8xQXRigaU6iNH9s=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:f5:c9:1a:92:65:2d:34:4a:15:fb:6d:14:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Jul 29 01:00:28 2025 GMT
Not After : Jul 30 01:00:28 2025 GMT
Subject: CN=7215ab54c738ace73a2cfd19c95afa0bb6c72a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:7b:eb:ba:76:89:3e:a8:de:5d:7b:13:e7:
d5:6e:ab:23:c4:de:3b:14:90:58:a2:a0:b2:1f:66:
25:3a:f3:34:54:62:03:a8:f6:0f:87:c1:dd:da:67:
1c:95:55:b4:cd:0d:69:f2:39:f2:e8:28:85:32:ff:
fe:a2:19:55:77:ab:fa:da:52:50:a7:da:b7:1e:57:
4e:0c:03:43:2d:79:67:c1:85:09:16:8e:e6:77:99:
bc:51:50:5c:2a:94:2a:56:1e:f0:88:16:f5:c6:f4:
8c:f7:39:8c:03:11:26:30:a4:a6:6a:1b:1c:06:31:
d3:c1:3e:db:58:bd:63:3b:ba:da:26:b5:88:6b:13:
6b:cb:8e:1c:56:9f:e7:aa:61:36:99:0e:48:b2:69:
3c:88:10:d6:3c:a5:1f:aa:c0:dc:ac:33:63:1b:7e:
f9:2d:fd:28:aa:14:2a:dd:55:b7:54:02:d9:dd:d8:
b2:7d:60:44:42:df:6c:cd:ad:0b:d3:96:ac:37:c5:
b0:0f:ee:c5:5a:5c:34:28:a6:28:5b:0e:9e:84:45:
69:b1:13:1a:a7:16:71:d7:22:ff:2f:2b:50:f0:b3:
da:c5:dc:dc:8f:89:f1:e6:f7:02:ea:8d:c3:bf:10:
85:98:8e:97:38:10:46:86:50:48:85:0a:cb:c3:81:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:AB:54:C7:38:AC:E7:3A:2C:FD:19:C9:5A:FA:0B:B6:C7:2A:4A
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:a7:41:3c:99:86:b7:61:02:0f:4b:4d:35:f0:ec:ad:76:
e2:05:cb:6a:0d:d5:eb:bc:af:12:83:e0:1c:33:3d:b4:59:40:
d2:2b:b3:a3:91:56:8d:ec:1a:f3:c8:fc:06:e7:e8:22:3d:cc:
05:60:c3:a1:8a:37:69:a9:dc:53:16:e0:b1:f0:b0:0f:59:98:
24:e7:ae:9a:39:21:10:a2:de:6a:bf:bc:cb:01:f3:99:5b:55:
59:af:79:bb:b1:6c:c5:ee:71:2e:d9:a5:9d:67:a7:42:dc:61:
81:93:fa:09:53:ff:03:da:28:d9:6b:3a:9c:a7:87:c3:80:a0:
87:57:ea:78:5e:7b:ad:29:9d:da:e4:b2:e3:ca:1d:1e:db:8b:
bd:78:c2:c3:1c:07:18:46:f7:be:ac:e9:f6:05:90:fb:d4:13:
46:61:43:6a:d7:2f:28:3c:ad:d1:e1:2a:17:38:90:b5:3e:f9:
b6:d2:a9:c0:f8:c6:24:59:a9:b6:38:ba:9c:21:d6:41:b1:2b:
b8:74:3e:79:52:80:be:f3:08:9a:2c:40:2b:d7:f0:15:47:7d:
d9:93:65:7c:26:3b:06:52:83:56:24:f0:e9:fa:5a:4d:dd:41:
c3:91:4f:a5:8e:0e:2a:be:c3:39:83:44:b3:7d:5c:5b:3d:25:
0e:73:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:41:04 2025 by rpki-client