Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: OMO9jxVCyK/XGNZ91Lfh32txSQOs5ZyIYf2/m+eZlOg=
Subject key identifier: DD:8D:5F:E6:EE:AC:D3:F8:E8:77:82:34:69:EF:47:70:7A:1E:70:0A
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 01992255BC7F8CF1019348CBAF87B725161A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 23
Signing time: Sun 07 Sep 2025 04:01:08 +0000
Manifest this update: Sun 07 Sep 2025 04:01:08 +0000
Manifest next update: Mon 08 Sep 2025 04:01:08 +0000
Files and hashes: 1: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: B8GRTz4No3lJ+k8UX7224R5pfHlvL74k93HMmtmQ9hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:bc:7f:8c:f1:01:93:48:cb:af:87:b7:25:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Sep 7 04:01:08 2025 GMT
Not After : Sep 8 04:01:08 2025 GMT
Subject: CN=dd8d5fe6eeacd3f8e877823469ef47707a1e700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:15:15:85:4b:66:96:78:55:a7:32:84:e6:
4c:e5:1e:30:56:1f:0f:0e:55:56:74:d3:28:82:54:
59:40:3d:9a:6b:0f:a2:51:cd:3b:9e:7e:28:dc:7c:
96:7b:b5:00:1a:57:ae:da:9d:0d:9d:e9:35:c1:1e:
b8:90:64:16:3c:c9:c4:09:e6:6f:72:59:22:be:c3:
9c:4d:e0:90:a4:b9:11:0d:bb:57:70:d9:4c:ac:fe:
fd:bc:06:c8:5a:09:69:bd:d4:df:c9:93:32:f3:42:
fc:f3:60:b3:b7:e9:a4:e4:2e:d2:7e:5b:9b:e6:0d:
95:41:78:7c:13:89:3e:ed:bb:c1:36:06:9f:31:bd:
8e:ff:f2:33:a9:ab:f2:5e:d3:79:f1:a4:58:86:6f:
be:6f:8b:71:58:33:5f:84:81:64:f8:87:80:29:cb:
00:17:fa:ed:21:23:50:c5:4d:de:88:24:f4:14:a3:
93:f9:76:cd:1a:86:c0:3f:51:ae:54:73:c7:93:e5:
d9:d2:3d:33:a1:84:55:48:fe:fb:f0:ad:21:22:cc:
74:1d:54:8d:72:ae:74:f7:dd:06:b0:ba:3b:82:3a:
df:d8:b0:3b:74:6a:31:74:61:61:83:5d:bd:f6:45:
5f:d4:9b:cf:c4:5d:3d:e7:39:99:70:53:77:18:c3:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:5F:E6:EE:AC:D3:F8:E8:77:82:34:69:EF:47:70:7A:1E:70:0A
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9f:f7:50:c3:31:d9:aa:7c:d9:54:7d:09:df:48:99:1b:b6:
0e:b5:5c:43:31:28:dd:c3:d3:ab:76:b1:5a:25:a5:0e:57:98:
37:b8:a2:8a:45:47:81:3c:59:8f:0b:8c:50:8a:04:a4:2a:40:
8f:01:a0:75:62:d1:fd:48:5d:b9:ee:c4:d1:1a:03:3a:1b:5c:
ad:eb:1f:c5:e7:26:03:1d:f0:68:ee:a9:3d:a5:92:98:aa:aa:
97:41:e6:57:8c:2b:72:26:38:71:d6:78:27:fb:a2:b2:b7:43:
5d:91:66:e0:7e:41:dd:ad:3c:7e:6b:b9:80:9e:94:a9:e0:eb:
38:8e:d7:3a:61:c9:a7:73:8a:6d:fb:36:58:77:62:f7:fc:a0:
26:af:ae:21:dd:08:dc:c0:f0:10:ec:ce:18:e0:ff:3b:5a:09:
b8:9c:c6:9e:a2:53:0e:af:4b:7d:09:20:c2:f0:22:47:15:1a:
dd:42:5a:a6:67:07:5f:91:3c:ad:a3:38:9c:9f:c4:56:28:81:
58:fb:11:55:b6:25:ac:4f:48:78:7e:ed:e4:fc:53:61:ae:b4:
da:3a:59:a0:d4:21:f9:9b:09:82:4a:e5:95:26:bd:5a:c9:2b:
d3:04:06:ca:80:87:e7:2a:fb:0e:8e:58:5d:93:33:1b:a9:5e:
b2:5a:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:17 2025 by rpki-client