Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: 15foxExyBbJFdMZOiCMIcP/3NqT8VaFAk9sTTK54lEA=
Subject key identifier: C5:CB:5F:72:86:B8:2E:D6:A6:4A:CB:3C:CD:1C:C5:7F:85:C4:ED:E0
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 01992255BA6F34540908D727DC9225C2739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 05F5
Signing time: Sun 07 Sep 2025 04:01:07 +0000
Manifest this update: Sun 07 Sep 2025 04:01:07 +0000
Manifest next update: Mon 08 Sep 2025 04:01:07 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: CNkuUci0r7iHZsF3d/pmIXYVAgzJcbJSM1nInDJTo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ba:6f:34:54:09:08:d7:27:dc:92:25:c2:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Sep 7 04:01:07 2025 GMT
Not After : Sep 8 04:01:07 2025 GMT
Subject: CN=c5cb5f7286b82ed6a64acb3ccd1cc57f85c4ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:ec:65:74:e0:97:e6:b3:8e:23:6d:cc:a2:
39:a4:2d:e6:56:97:2e:93:30:6f:88:4f:49:88:de:
f1:e4:bf:fa:81:c3:ae:65:59:87:f2:08:15:cd:74:
08:a3:d8:3e:4e:1c:8f:61:07:6a:67:46:03:dc:2f:
2e:50:b9:ac:3c:ed:b2:30:14:62:74:fe:17:6b:f4:
eb:e7:ad:cc:d8:c1:46:01:29:4a:ab:b1:57:81:47:
c9:a0:0b:dc:89:ff:10:c5:32:2f:2e:de:54:1b:31:
3b:e2:80:71:e6:5f:88:50:f0:cf:d6:87:a5:6d:d3:
d9:2f:f0:94:7a:44:7c:16:2e:80:c6:ac:63:e5:d5:
db:85:5f:08:f2:27:82:f1:8c:ab:ec:7b:2a:1c:fa:
58:45:74:83:fe:31:20:3c:ad:18:90:c8:c3:53:2d:
de:93:c8:3a:48:f6:16:d0:e5:c5:fd:c3:4c:74:9c:
e5:e8:c4:d6:59:1f:23:2c:20:dc:df:05:92:d2:52:
48:63:07:cf:44:1f:13:aa:95:a8:d6:b2:ff:3b:4b:
49:5d:f4:a4:dd:e2:09:e2:de:09:46:f3:30:b1:bc:
d6:ef:9b:93:04:fb:a9:67:4c:02:87:89:ed:9d:59:
f0:77:f5:5e:10:11:a1:1d:31:56:62:34:86:a8:90:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:5F:72:86:B8:2E:D6:A6:4A:CB:3C:CD:1C:C5:7F:85:C4:ED:E0
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:12:f6:ad:42:85:c7:6b:f2:0f:f6:9d:26:24:34:6a:cc:
58:42:d4:ed:6c:69:61:64:01:26:13:75:d4:4c:a7:c2:0b:3b:
b9:ce:31:2f:dc:58:3b:6c:36:f3:26:28:f2:dd:c4:d5:94:e5:
56:73:89:10:c1:30:1f:56:6b:60:d2:76:6c:76:5e:df:13:af:
95:c5:5c:ff:ad:50:e8:68:62:9e:41:65:f5:1c:f1:9a:db:87:
ff:db:61:a1:64:53:1f:c3:f8:82:d8:fa:dc:0b:88:87:e4:f4:
9c:2e:06:1a:7b:7c:f8:3e:8d:aa:8d:6b:48:41:56:53:ce:67:
f0:b0:cd:9a:e2:7a:76:ec:4f:a0:fb:d6:33:13:c1:66:6a:dc:
a6:52:9c:e6:4b:47:e0:f7:dd:3a:53:39:44:e9:1a:5e:66:a7:
0b:24:15:2b:be:52:02:1b:d2:46:ac:41:c8:bf:1a:29:b1:71:
83:4e:78:49:52:58:53:7a:ff:15:e9:0c:99:47:29:ba:62:da:
b6:1a:21:9d:e2:fb:fd:c8:33:97:7e:5d:6f:2d:a0:46:fe:af:
9f:02:bd:b5:f9:0f:d1:71:02:a6:0f:e1:ab:96:0b:9b:5e:31:
87:ca:7c:de:54:f3:85:4c:44:00:41:79:f5:03:5d:50:f7:66:
76:37:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:29 2025 by rpki-client