Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: rpVPmNZ8B/5j51sqroN21629kHOyJR3tzGHusO3DNJY=
Subject key identifier: ED:31:92:61:41:52:32:59:12:34:17:78:57:47:28:8D:27:82:51:84
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019922FA0FD9B9F4A81BA141C5146D3FDC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0F30
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: 6ndQVcpVuksTZrAmwvHo46J9btSHOyuz4B5ou0jGISQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0f:d9:b9:f4:a8:1b:a1:41:c5:14:6d:3f:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=ed31926141523259123417785747288d27825184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:3b:d2:47:11:4e:b4:89:e0:a3:e2:e5:d3:
3e:e2:a5:7e:b5:ee:d6:e1:df:3d:67:19:bc:93:db:
13:c0:be:6e:de:cd:5c:8c:18:39:e7:e6:f2:0f:20:
9f:35:39:cc:2f:10:51:4c:13:33:67:27:43:ef:56:
7f:9e:9e:8b:31:0c:11:87:84:f7:16:7c:4f:43:60:
81:37:f3:fd:e1:28:3a:40:c7:e5:29:6b:dd:8f:8c:
2f:52:b6:b1:b6:f1:91:ee:8b:bd:d4:f7:47:32:ea:
5b:48:3c:f7:93:eb:05:75:82:d6:7d:b8:4c:c8:ab:
5e:56:5b:24:96:d1:9a:9a:8b:10:42:a1:b5:7d:01:
fb:8c:6b:20:19:3b:66:74:c5:e4:ff:5c:df:04:ce:
2b:44:0f:b4:18:b3:37:f4:5d:aa:7e:b1:62:e8:cf:
30:2c:ff:d8:e4:1f:eb:ae:25:e2:63:b4:d4:38:61:
30:c4:0d:30:7a:17:04:43:43:92:7a:45:ba:d0:f5:
60:82:13:00:34:00:d0:de:a7:1d:2e:45:4c:17:56:
f5:11:07:5d:69:76:05:1d:9b:32:3a:df:0f:9c:53:
a8:46:64:1f:c2:93:01:1a:fb:54:58:ee:b2:7d:06:
d7:85:c4:75:da:93:ea:c6:8c:36:e6:e0:c2:e7:43:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:92:61:41:52:32:59:12:34:17:78:57:47:28:8D:27:82:51:84
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:30:91:42:d7:79:65:76:43:2b:36:d2:b8:fb:83:74:e0:
a3:20:54:55:de:1f:d7:05:18:54:00:c1:48:76:d8:5f:4f:2e:
c1:6f:24:b3:da:86:ac:1c:f0:35:3b:46:de:fa:de:7d:b6:55:
8e:53:38:27:9f:ab:bb:f1:24:fe:98:8d:41:74:ce:48:a3:1f:
2d:19:83:3e:26:12:05:99:f9:a9:d7:4b:04:6a:4f:e5:c4:ee:
07:9e:bc:18:66:d6:69:10:fc:6a:b1:49:42:10:bc:28:1b:33:
a6:73:f4:06:70:3c:61:a6:22:3b:d6:21:e9:14:6a:57:96:e0:
c2:7e:10:c8:05:a3:5d:e9:7c:09:40:34:b0:0a:02:f9:60:c3:
99:47:a9:45:ca:9e:51:03:f2:35:6d:a5:27:28:08:21:1e:95:
0a:76:f5:2b:1e:43:26:2a:70:15:0c:50:60:bb:b8:c8:7d:b0:
e9:31:6b:63:bf:41:7d:0c:a7:a6:c6:5e:c4:9d:bf:c6:24:17:
89:03:2a:72:05:c9:01:88:c9:d0:c2:92:3e:1b:4c:05:15:74:
fc:d2:71:a4:f6:37:a9:01:ee:39:7d:07:d1:f3:0c:90:ec:11:
19:b7:f9:1b:e3:d1:8d:bb:27:cc:03:c7:96:1f:9a:8a:42:89:
55:a6:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:38 2025 by rpki-client