Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: 8+O99wZiu0z9Yty7l8BWNWMj2pepZ2i/eznN7zCVLUU=
Subject key identifier: FB:D2:B6:B7:0F:AF:D4:51:8F:01:2F:BD:76:68:E6:45:42:96:B0:35
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 019922552F2EAE8DFEF982CB96746BE4F5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 0672
Signing time: Sun 07 Sep 2025 04:00:31 +0000
Manifest this update: Sun 07 Sep 2025 04:00:31 +0000
Manifest next update: Mon 08 Sep 2025 04:00:31 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: srQcAjbtOoqVq9ZGHERhVYqiynqes/V534VUZ84/7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:2f:2e:ae:8d:fe:f9:82:cb:96:74:6b:e4:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Sep 7 04:00:31 2025 GMT
Not After : Sep 8 04:00:31 2025 GMT
Subject: CN=fbd2b6b70fafd4518f012fbd7668e6454296b035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:ec:a0:0f:e0:98:0c:66:61:08:d9:38:cb:
b0:f4:28:12:ca:24:be:04:ff:e4:87:86:21:a2:f0:
45:4c:57:84:b0:84:a8:31:7a:b1:05:27:6a:82:54:
72:77:d7:04:45:98:2e:c2:09:82:29:16:5b:6c:10:
da:e8:4b:15:0b:6e:23:1c:78:f0:46:82:51:09:55:
8f:3b:a8:d1:29:39:74:64:a1:6d:36:00:20:fc:22:
d0:fc:5f:a2:ea:fe:31:be:6c:e0:b7:ee:1f:5a:46:
3c:d5:e4:cc:4d:f1:dc:6f:45:02:46:7f:a9:14:12:
b8:65:2a:f1:a3:b5:40:70:7a:bd:cc:5f:af:d0:c0:
06:89:5b:35:e5:91:71:5f:cf:5e:9f:99:26:0b:29:
5f:70:90:87:ca:fe:cc:6d:32:1f:f5:f9:dc:c2:62:
88:96:9f:40:19:e1:d0:a7:56:f3:6f:c1:7d:f4:9e:
69:22:1f:c3:76:2b:2c:fe:a3:11:7d:60:80:ea:3c:
db:03:cc:34:ba:88:39:f6:47:1e:7f:60:25:28:24:
a3:4b:26:24:d4:c8:ea:17:25:97:5a:44:c0:85:05:
37:25:ee:4f:f1:53:68:3a:74:d4:c3:f6:9c:af:b9:
55:73:ae:a4:a0:d8:9c:06:4f:3a:5e:82:38:3e:48:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:B6:B7:0F:AF:D4:51:8F:01:2F:BD:76:68:E6:45:42:96:B0:35
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:b1:cc:dc:3b:2a:ec:e8:05:63:6e:94:6b:7e:cc:f2:01:
77:d2:3f:0e:b5:2b:2a:2f:43:b2:9f:1e:f1:be:02:1e:f3:87:
2c:56:8f:2a:07:55:de:02:9a:db:5d:5e:65:14:cd:25:23:b1:
12:ea:ac:1d:64:a7:99:b7:17:6e:19:8c:3f:24:ab:86:fd:c6:
f7:bc:e1:c7:b1:2b:d4:e7:5a:8d:bd:e5:4a:b4:01:0c:d1:2f:
eb:a9:88:c8:b5:74:49:df:0b:d3:4c:84:9d:71:a6:78:77:f4:
1e:7e:01:79:63:0e:0e:9d:42:1b:25:ab:47:5f:6b:42:f8:b4:
28:14:47:e8:09:1c:bd:86:44:ec:73:44:5f:43:ee:68:e4:c4:
3e:a0:b5:4d:fa:cf:18:d6:7c:ed:f8:5b:38:31:12:74:12:2b:
1f:06:58:59:a1:50:6b:58:3f:4e:6b:ae:02:15:5b:c8:c5:3b:
ed:09:8f:7c:ad:6e:36:9b:46:71:30:b5:19:7b:af:8d:7a:1b:
65:b8:c0:04:fd:9a:ae:ab:f8:bc:17:19:f7:7d:01:e7:a6:a0:
f7:17:bf:91:f0:aa:1c:94:d1:fc:f9:c1:8b:8c:43:0b:77:75:
10:ea:80:d0:21:17:f7:eb:39:90:f8:20:e3:ff:e5:8a:3b:f5:
2e:80:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:33 2025 by rpki-client