Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: /olSodzit0bCoSIkaUr83GYHkWr9dH2+C/b2oiOsl5g=
Subject key identifier: D8:54:E9:36:64:74:26:28:08:CC:13:A3:50:F4:CA:35:2E:81:E1:E6
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 0199239F6AC40E0F8A4F187F1B80741E721D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 109D
Signing time: Sun 07 Sep 2025 10:01:14 +0000
Manifest this update: Sun 07 Sep 2025 10:01:14 +0000
Manifest next update: Mon 08 Sep 2025 10:01:14 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: +MTQW0ECmm+vJMXUQDE2xrvby+hMESf6L5Md3TK4bpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:6a:c4:0e:0f:8a:4f:18:7f:1b:80:74:1e:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Sep 7 10:01:14 2025 GMT
Not After : Sep 8 10:01:14 2025 GMT
Subject: CN=d854e9366474262808cc13a350f4ca352e81e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:4b:c5:99:96:6d:ff:31:72:5b:1e:a3:c1:
b6:69:20:81:38:9b:ee:e0:4a:99:a9:5f:16:db:91:
8a:08:a6:be:33:83:dd:e3:71:13:6f:2f:c2:d7:ca:
91:7c:52:1b:c4:7e:66:6e:bd:39:41:f6:d6:4d:2a:
b9:7d:4f:dd:60:51:d3:ee:8e:c0:f6:1c:8b:10:be:
98:a7:ce:4d:71:b6:af:85:4b:d3:22:1f:8b:54:9b:
a8:e5:97:b6:6a:98:b7:1a:aa:47:a9:d0:24:e3:93:
b0:b2:50:91:4e:23:9b:fa:a9:8d:9a:35:21:5b:fa:
19:f5:8d:ac:fb:48:67:fc:9b:1d:12:ac:06:d6:ac:
e9:fe:53:70:a1:a7:63:12:9d:72:ab:4e:88:bd:dc:
df:e4:b6:8f:21:71:26:d3:3d:a1:48:6e:35:e4:5f:
c0:db:b3:3b:56:05:b1:30:d1:61:d2:97:a1:ca:5e:
79:c1:31:67:5c:52:ce:89:84:9d:91:c9:ec:0b:86:
7c:2b:67:85:ec:a5:50:6d:9b:be:55:27:9a:02:7b:
8a:0f:ae:f1:9d:9d:c5:43:ec:0a:34:0c:76:4c:da:
85:13:f9:cf:21:58:91:8e:76:e5:3a:c8:ca:b0:b7:
dc:ea:e4:05:95:52:53:c7:8c:44:8e:b6:a1:3f:98:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:E9:36:64:74:26:28:08:CC:13:A3:50:F4:CA:35:2E:81:E1:E6
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c3:f2:40:8c:bd:80:83:59:c4:e8:4b:c7:96:53:47:17:fc:
2e:cf:63:7f:14:45:d6:7d:7a:f6:22:d6:8f:87:c2:c7:8d:11:
d5:2c:ed:5a:9a:d6:38:ff:b8:2e:4b:76:f1:a8:cd:2e:fc:de:
3f:ec:2c:a8:98:82:0f:2a:73:55:61:ff:e1:a0:87:be:91:f2:
fd:b7:21:62:11:55:c6:cb:a0:fc:5f:b8:f7:6d:45:8d:0b:70:
7b:b1:a7:ad:71:a3:6b:1e:69:59:b2:27:8b:ca:b5:d4:6f:84:
d0:52:6c:1d:80:87:18:4d:10:38:c1:f4:cf:95:67:93:23:6f:
f6:ca:90:40:ac:e6:7e:25:48:09:71:86:8a:ce:89:32:9e:bd:
cb:13:2c:c6:65:b5:04:66:88:cb:be:40:8c:3b:01:e8:f3:0a:
9d:1f:99:0d:d3:62:c4:ab:5d:cf:94:d8:92:27:6f:c0:1f:50:
73:6c:d2:4f:9d:00:50:9d:59:7d:8a:4b:ca:48:2f:9a:56:56:
f5:e4:14:53:c5:9f:70:a9:07:5c:4a:fd:71:c3:94:c6:a1:08:
08:6d:23:c0:2d:bc:da:04:1b:fe:9f:78:a6:27:4a:1f:47:d7:
37:37:44:42:2c:97:15:75:d5:3e:cf:30:56:2a:86:71:7e:e8:
7a:21:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:33 2025 by rpki-client