Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: /sWe/0kNWEyU+oy8IU9yUWWtkly+sZyHPt6vwn00O0E=
Subject key identifier: 26:01:12:32:1E:EC:D4:BA:53:DA:0E:61:40:FE:A6:39:3A:8E:DA:31
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019848C048BA47E08D7D83FA6511213D451C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 158E
Signing time: Sat 26 Jul 2025 22:00:17 +0000
Manifest this update: Sat 26 Jul 2025 22:00:17 +0000
Manifest next update: Sun 27 Jul 2025 22:00:17 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: dPCoCF4kSBeSMSEyfYdkdY8OMIO8vEMQ9i9bPltA20w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:48:ba:47:e0:8d:7d:83:fa:65:11:21:3d:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Jul 26 22:00:17 2025 GMT
Not After : Jul 27 22:00:17 2025 GMT
Subject: CN=260112321eecd4ba53da0e6140fea6393a8eda31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:5a:24:c6:4a:34:5a:16:11:15:17:36:31:
54:bc:1a:23:f3:d7:62:e4:c3:9b:2c:50:fa:d1:b2:
61:cc:5a:f9:b8:a4:9a:34:a9:14:24:bd:e2:af:df:
be:81:7d:c0:c4:51:9e:e0:a2:1e:a6:ba:52:a1:d2:
a6:f3:53:37:19:a6:19:ca:db:ad:9f:e1:47:0e:5e:
c7:1e:66:f7:a9:15:8b:b8:3f:a7:dc:d2:ac:3d:bd:
03:3d:37:99:9c:c3:8e:4b:28:69:a9:d6:23:9d:c8:
ce:8b:bc:c2:c4:ea:80:d8:27:16:30:20:ec:63:08:
a8:26:ab:9f:c9:20:45:19:b6:32:aa:c2:00:ee:b9:
1e:df:60:b3:a1:44:e5:82:2d:44:e0:80:73:66:83:
1c:36:64:9d:a0:65:a4:87:ed:6a:29:0f:1d:09:d2:
25:91:7f:9e:dc:f1:e0:72:da:7a:16:41:3b:07:24:
29:bb:ea:0e:9c:70:c4:12:05:f8:b3:d5:c3:ed:32:
d2:46:9b:30:7d:06:dd:cc:a3:09:68:f2:4c:7c:5e:
ec:92:08:28:a4:f6:10:eb:70:d1:d8:01:0a:f1:14:
2c:50:5d:f5:84:ed:48:8e:ae:5e:95:1c:0b:35:60:
84:56:67:32:a1:6d:1f:ee:70:f6:f2:c6:c7:1a:1b:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:12:32:1E:EC:D4:BA:53:DA:0E:61:40:FE:A6:39:3A:8E:DA:31
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:7a:8e:a2:5f:01:45:bb:5d:7e:2e:b8:84:e0:76:bd:28:
0c:ed:8d:67:15:ad:a9:69:3f:8e:07:52:1b:ce:cf:ed:9f:59:
2f:af:11:f3:44:81:de:a9:10:61:a2:2b:3e:fc:c0:b0:87:77:
d7:6c:a3:ba:59:2f:e6:db:1d:59:cd:fa:82:8e:39:23:be:29:
f6:d2:8d:d9:9d:04:ff:36:9a:69:49:4f:3a:b8:6c:d0:dc:11:
0e:28:e9:d1:92:65:e7:0a:f3:cd:a7:23:11:42:9b:7f:c8:70:
eb:4f:9a:36:80:83:09:76:fa:d1:85:b2:e4:e2:9f:e3:46:bc:
c3:db:fd:94:32:99:c2:81:29:75:de:11:7f:c0:75:17:04:bf:
de:93:c6:72:7f:8c:bd:7d:99:7b:d9:23:9b:8d:8c:4c:cd:39:
9c:4e:fd:a2:3a:7d:d5:24:1b:31:9f:52:92:2f:fb:1c:70:49:
9b:cd:92:44:e9:7d:b6:2d:80:f4:7d:5e:19:6d:c0:19:d4:4d:
be:49:34:04:00:9d:26:0a:b1:1f:08:8f:1f:c6:28:75:0b:2a:
46:61:01:0f:a3:8e:99:7a:f5:58:5c:6c:46:2f:de:f5:35:f9:
7a:3f:b8:a9:19:60:f0:2a:3f:64:41:76:e0:6c:f2:73:76:34:
d5:f5:d5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:42 2025 by rpki-client