Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: aQE7WhyYPR7v9a5uUoNSKgeTrtJRcYCivEx2j4xUgUI=
Subject key identifier: ED:DC:95:D5:FC:9B:D0:01:D5:A6:BF:DF:4E:1C:5E:67:C4:3B:E2:60
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 019A71B8D075C971353EC731EE502C63DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 120C
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: U9nHi1YjWTmzIA33x7j4i1ll2mTfbsk6bMk2z+Ni7uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d0:75:c9:71:35:3e:c7:31:ee:50:2c:63:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=eddc95d5fc9bd001d5a6bfdf4e1c5e67c43be260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:5b:a5:d0:04:90:8b:5e:85:76:03:9b:c6:
85:25:44:54:9f:67:b5:fc:8e:3a:2b:87:eb:02:a1:
e4:e5:70:a9:7d:9a:0f:58:47:3f:75:e4:41:6c:47:
b3:a1:37:91:11:42:aa:b0:09:47:42:8c:93:50:33:
ef:93:f7:95:71:0f:86:e8:bf:d9:b3:b6:75:97:27:
73:14:d2:86:7b:ca:e8:0c:e6:e7:37:48:80:07:55:
92:4d:0c:75:b1:4d:09:49:c6:70:b2:2b:09:80:56:
fc:78:a2:9b:6f:8b:4e:a9:5a:1b:e8:7f:b7:da:63:
37:91:2a:fa:a3:8e:88:61:e1:ba:66:2c:03:ec:e3:
62:ef:f5:1a:59:65:e3:fe:b7:46:a5:3a:a2:a1:25:
e3:43:a1:7e:15:ea:ff:9b:c0:02:5b:1c:18:58:9f:
95:bc:95:33:e0:9e:a4:d8:68:dd:80:ff:d0:d4:35:
22:05:20:3c:1f:e9:5e:ab:a2:4f:fb:9f:64:43:0c:
8f:f6:e8:bb:4a:94:c9:ce:d5:b3:82:75:e3:a2:8e:
50:23:ad:03:1e:5f:af:c8:aa:5a:00:ca:6b:63:0a:
3d:49:eb:01:68:69:32:ab:4b:a0:ab:ec:b5:ae:4f:
30:7f:7e:82:e0:bd:bf:55:96:0f:10:c6:95:a4:02:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:95:D5:FC:9B:D0:01:D5:A6:BF:DF:4E:1C:5E:67:C4:3B:E2:60
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:c5:f7:1f:37:b3:55:c7:b1:d4:99:87:74:bf:83:e6:9c:
a0:1b:47:33:54:d5:b0:b6:7b:83:2d:b2:5a:64:71:57:85:27:
f1:03:d0:20:a5:bc:23:cf:a9:a4:01:8b:f8:93:12:a0:6c:78:
18:af:c0:16:c5:aa:95:84:05:f7:da:53:f9:33:d4:82:33:8c:
d1:c4:32:dc:08:16:bf:f5:65:dd:3a:f7:73:b8:57:cd:52:0e:
d8:5f:3b:3f:22:1f:41:13:85:d2:93:06:10:82:76:13:64:13:
d4:f0:f4:dc:80:94:e9:f9:ee:e2:fd:11:a1:af:71:5a:63:f1:
22:7c:da:a1:dc:76:ca:53:3c:b9:e0:f9:2b:f9:8d:cb:b1:5e:
be:f0:e4:1f:22:9c:a3:07:7b:b2:8c:51:5f:77:35:e9:fe:b7:
42:e5:cb:30:96:67:b0:71:0d:ed:43:c3:4b:82:7a:8a:1c:00:
65:a5:41:03:d6:cc:76:61:86:c2:23:b4:b9:e0:2e:e9:83:ed:
7d:40:e9:e0:53:5a:2b:41:38:96:dd:45:79:eb:36:bb:fe:71:
03:15:cc:a1:88:fa:f4:41:e7:14:dc:51:c2:d3:d7:f5:92:81:
ae:f5:5b:c8:f8:c6:22:c4:4f:34:b1:5f:11:f3:02:84:7d:a8:
05:04:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client