Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: xqIuOmmW88G7zKQBfZqGPOqjVoViUKbeRQ/F6gSum10=
Subject key identifier: 05:32:C3:7C:8A:1D:C0:37:9D:32:6F:30:88:63:16:56:BE:F7:6F:80
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 019848898A6A821C18D4AF7186D46003B764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 21:00:29 +0000
Manifest this update: Sat 26 Jul 2025 21:00:29 +0000
Manifest next update: Sun 27 Jul 2025 21:00:29 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: B3cEIw3H4ldHQg6bMHuRdoog9iMEtZPnjnOgn16ZNeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:8a:6a:82:1c:18:d4:af:71:86:d4:60:03:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Jul 26 21:00:29 2025 GMT
Not After : Jul 27 21:00:29 2025 GMT
Subject: CN=0532c37c8a1dc0379d326f3088631656bef76f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:f8:95:b5:9c:f7:46:8b:2c:3d:cf:a6:05:
23:3b:fd:51:5e:52:fc:d2:89:e8:41:0f:b6:6b:42:
fe:49:e2:75:fb:5e:d6:ec:8b:1e:2f:fa:ba:81:ef:
a0:97:d0:28:a0:c2:23:9a:7d:a6:ed:b8:2a:5c:86:
8e:9b:1f:39:5d:67:28:c4:89:df:c4:85:af:a2:78:
40:b4:fb:b2:94:fc:10:61:ed:54:02:1e:db:8d:7b:
3e:fa:b5:0d:1d:6b:9e:b5:67:e1:1e:6b:d7:e9:c1:
d5:af:69:cb:21:fa:81:96:60:7b:dc:fd:2e:61:0c:
69:e8:6d:71:14:9b:f1:27:55:09:87:f3:1b:36:5c:
a4:3a:8b:56:92:0c:40:9f:60:64:77:6e:3a:94:12:
44:b1:52:89:42:9e:f5:02:3c:85:d1:7e:ab:f1:ce:
f5:62:bd:b0:62:ca:30:ca:86:56:3e:7f:e3:b5:0c:
59:9d:97:b9:a5:26:4f:2e:f7:7b:e6:0c:52:91:8e:
a7:c3:a5:cf:f3:db:aa:20:7f:e3:45:de:2b:83:b6:
fe:29:b5:00:99:fa:f3:f5:7e:b8:43:e2:86:a0:39:
a1:9b:27:4b:19:7a:97:ef:f3:92:18:18:d3:9f:be:
6a:7b:63:05:26:2c:01:12:a6:2d:91:cd:ea:57:c6:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:C3:7C:8A:1D:C0:37:9D:32:6F:30:88:63:16:56:BE:F7:6F:80
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:20:41:eb:51:b1:39:c7:2d:fa:ae:f1:68:85:b4:68:bc:16:
3e:12:7c:9d:f4:81:b6:db:88:7f:5d:c4:83:9d:13:47:2f:7c:
ed:31:db:38:30:1b:0e:15:1c:5d:43:4b:b1:87:f7:54:b9:99:
e4:f2:4e:67:6f:a1:60:ed:cf:77:8b:21:04:0c:54:59:7c:33:
df:02:c3:b9:f2:07:ec:bb:93:80:3c:60:7a:ce:6b:52:78:f7:
da:f6:72:a5:32:d9:01:4c:e1:c0:59:54:75:2b:3d:15:0b:6b:
f9:a8:0f:c7:d5:f3:a8:dd:07:52:11:2f:7a:f2:07:6a:cd:4f:
ca:17:db:8a:91:d8:42:38:7c:bd:e1:34:9b:3e:66:31:e3:43:
b7:c5:9d:74:b9:35:3f:28:78:ca:ec:7f:ba:44:e7:f7:af:bd:
0b:48:40:e6:0c:63:f1:cd:69:12:1d:27:56:f8:99:0f:ec:8e:
fd:e9:a9:22:3a:3c:ea:6c:74:c7:0f:ff:52:c2:ea:27:d6:c8:
86:4b:8d:a8:30:e9:dc:97:be:ca:9a:ad:8f:48:12:e6:06:f2:
1a:a6:a9:6c:09:36:42:47:1e:d8:30:22:8b:b4:35:06:c4:dd:
1c:0b:57:f9:bf:d1:6d:18:36:1b:aa:bf:31:1f:19:db:ad:34:
c6:2a:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:46 2025 by rpki-client