Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier: boUhX4lmifZQi71/qq0UKjnobLgduz0Yin2VH0vqK/E=
Subject key identifier: 65:E9:93:7B:97:0F:4C:B9:C5:BB:BD:97:B9:4B:63:F1:0A:B5:B4:23
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial: 019921B20E8C937EAA9B93A99121A3ED6F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number: 1241
Signing time: Sun 07 Sep 2025 01:02:21 +0000
Manifest this update: Sun 07 Sep 2025 01:02:21 +0000
Manifest next update: Mon 08 Sep 2025 01:02:21 +0000
Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: THvDw052CtEO+ib+N9HWwrVrOECoj2ChqOrH723sY9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:0e:8c:93:7e:aa:9b:93:a9:91:21:a3:ed:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Validity
Not Before: Sep 7 01:02:21 2025 GMT
Not After : Sep 8 01:02:21 2025 GMT
Subject: CN=65e9937b970f4cb9c5bbbd97b94b63f10ab5b423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:ce:d4:b3:e1:8d:33:90:2c:07:c3:9e:40:
af:15:36:a6:81:62:65:59:11:b7:c6:22:17:0f:23:
3b:fa:4a:b4:10:7c:fb:50:ee:e5:76:ea:fc:04:f5:
63:7b:14:a7:b5:df:4e:6d:fa:9a:b5:8d:82:d8:27:
31:10:24:c7:6a:17:7a:73:4a:75:c4:6d:12:08:f1:
c4:7a:ff:b8:48:54:d8:f3:6b:e3:f7:54:60:5c:4f:
da:ed:58:ce:18:8b:10:55:8d:7e:11:d2:1f:5b:17:
89:cd:ea:63:49:e0:a5:3b:68:e6:08:36:e0:a2:bb:
66:84:ad:ff:cc:0c:ca:f1:dc:f8:f7:ba:36:b7:2e:
dd:ff:fd:c0:f4:11:6e:62:0c:f1:85:07:51:6b:a9:
6c:4c:9c:30:2b:dc:bc:4f:d2:af:e7:a4:5c:3b:d6:
15:05:4e:92:f6:8a:a1:d0:55:e7:f8:a6:a1:07:94:
1e:61:9b:0d:29:bb:b9:77:19:31:ac:d2:27:63:ba:
4d:62:15:58:e4:a1:1b:c7:a6:62:fe:97:10:f8:cd:
66:97:8f:cd:42:9c:30:a7:8b:6e:c2:d8:f4:c1:b5:
97:59:41:ec:29:2a:66:f3:cd:1b:da:a0:c7:6e:33:
4f:ff:09:c9:49:b1:e8:e8:d3:60:d8:5c:3f:f0:14:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:93:7B:97:0F:4C:B9:C5:BB:BD:97:B9:4B:63:F1:0A:B5:B4:23
X509v3 Authority Key Identifier:
keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:e5:0b:ed:56:bf:b6:cd:33:73:86:65:3a:94:66:17:9f:
f8:b0:aa:2d:05:b9:62:9e:3a:9e:02:28:c0:a8:ea:d9:05:dd:
1e:c0:6a:c2:b2:e3:6a:7d:ba:ef:ba:48:a3:a0:c0:1b:99:c7:
29:99:81:6a:d4:4d:9a:1a:ab:40:bd:55:6f:30:25:a4:9e:34:
d6:b9:1c:63:8c:12:ad:f6:71:b7:9b:e3:d4:25:b2:86:31:f9:
c4:af:b4:17:4f:53:64:a3:b8:2f:23:2c:88:d3:90:2e:3e:80:
68:2d:95:6d:b1:af:ec:0f:39:cf:a5:ce:26:b4:2e:ef:58:a9:
bd:0a:fb:0d:0d:10:bc:8f:6a:73:7a:91:f9:cb:71:62:e9:9c:
6e:cc:64:46:4d:9e:5c:a0:6b:7b:77:ad:9a:5a:72:a8:30:c9:
44:82:60:79:0b:be:e6:8d:81:e8:05:e4:2a:0f:ee:db:9d:2c:
a1:42:8a:e2:f9:63:f1:a2:f5:d0:bc:b0:44:70:95:9e:0c:de:
90:d8:36:b8:e4:0a:29:21:d8:de:81:fb:bb:bb:f4:91:c2:ba:
5c:1f:ce:66:88:6f:e6:c8:b3:7f:5a:68:97:00:4b:d0:a8:bf:
d2:1e:7e:fb:74:77:3c:dc:c8:f8:ea:c4:c8:1c:f2:6b:06:75:
1d:63:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:57 2025 by rpki-client