Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: WBc5Tsu6tz64GWxYXm63dGeXdRn06s5koR73JOqMhKs=
Subject key identifier: 1F:2A:1B:EE:21:E1:7D:17:EF:D1:42:09:AB:A2:AD:C8:3C:1B:CA:E9
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 019853B1F04D57AD384303CC5AC01C44D97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0EAD
Signing time: Tue 29 Jul 2025 01:00:26 +0000
Manifest this update: Tue 29 Jul 2025 01:00:26 +0000
Manifest next update: Wed 30 Jul 2025 01:00:26 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: fAaLbHS9xTQfV1844xH+QqPcvDmsYot5+SJwBuQ/Aak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:f0:4d:57:ad:38:43:03:cc:5a:c0:1c:44:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Jul 29 01:00:26 2025 GMT
Not After : Jul 30 01:00:26 2025 GMT
Subject: CN=1f2a1bee21e17d17efd14209aba2adc83c1bcae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:57:c1:bd:bb:db:e0:49:67:15:49:84:01:
1e:71:f2:ba:3e:d8:8d:77:a5:b3:90:bb:4a:c5:64:
f8:1e:b7:4c:67:c6:f9:07:44:a9:67:8d:6a:e4:c4:
75:f7:47:dc:17:3b:8e:b0:e0:d3:11:1a:e8:c7:83:
74:9e:61:c2:01:3e:8f:e3:4e:b1:6f:72:24:49:21:
29:da:cf:49:eb:99:07:80:08:3e:fa:3e:19:89:e5:
30:0b:65:73:ad:16:9e:d7:e1:89:d4:70:82:db:0f:
fb:1c:bf:6d:c4:4f:d9:a9:92:ba:b6:aa:a7:70:8a:
fc:23:b7:5b:71:de:91:a0:30:d3:68:21:56:75:22:
68:fe:6d:ed:9f:f5:df:1e:04:c9:39:dd:80:10:aa:
56:96:71:e8:19:68:8f:b5:2b:55:17:19:a5:5f:ac:
0b:e7:8b:c7:47:36:96:90:c5:03:4d:30:f1:aa:38:
62:a6:75:0e:b9:8e:a6:e8:b7:35:35:5c:73:f6:af:
23:10:cd:7d:5b:e1:40:9b:e6:7c:0e:10:03:28:9b:
29:b1:e3:aa:c9:78:bd:4a:44:e0:aa:0d:ef:7d:fe:
b9:4b:dc:80:09:06:2a:c8:8f:ca:49:d1:23:01:5e:
d8:9e:73:96:03:2a:50:f4:6e:db:0d:1c:15:3e:33:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:1B:EE:21:E1:7D:17:EF:D1:42:09:AB:A2:AD:C8:3C:1B:CA:E9
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3c:5e:f9:18:0a:73:5f:d0:15:9d:8a:34:08:ed:04:31:56:
36:f3:f9:93:0d:f6:0d:79:c3:cb:52:72:a6:ec:4d:00:79:af:
ec:4a:6b:2e:93:11:29:e3:73:b1:fb:e6:01:aa:42:98:5b:25:
1b:e2:5c:54:07:02:87:c4:33:2d:25:06:80:3f:f0:be:7e:22:
3e:1d:32:7e:c8:b1:af:28:94:4c:09:87:02:39:e4:44:31:fe:
99:f9:c3:d2:33:8f:bb:cd:75:0d:68:47:8d:7e:3e:18:21:48:
32:0c:18:24:0e:08:cd:e1:2d:b8:9c:a4:76:6a:8b:36:86:9f:
da:78:78:8d:ae:da:c3:8d:8b:bd:a3:16:f3:80:3b:87:27:a1:
6d:8b:1c:6a:5f:c1:b2:c8:66:b4:7c:b1:76:bc:ee:bc:12:e7:
83:7d:0f:9c:91:f7:8c:98:c4:79:91:77:ad:4f:e3:5f:8b:0e:
2f:53:d1:c7:ae:a4:6a:8d:7c:9f:24:93:24:6f:37:ef:72:3d:
eb:c2:26:35:70:12:20:0b:b1:35:ed:4e:63:d6:9a:18:95:06:
81:e5:05:78:64:1c:c8:24:59:2d:56:b7:8c:11:e9:57:07:3e:
fd:53:b3:7d:aa:25:6c:bd:d8:b0:f2:04:40:81:3f:5c:2a:bd:
f1:6a:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:45 2025 by rpki-client