Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: 4gHS1G8PlyopdjvKoK0KPI/rDbs4Vf82nR9w4k9uTKc=
Subject key identifier: D3:DC:02:20:22:4B:D4:8F:EC:04:CD:96:31:01:45:74:AF:C6:D5:14
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 019A71B8C793ECBFDA851B7B56722F2F4C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0F90
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: BoXVrMTjaqWZ5MVyiVlrnnULTWVrDapXe0piFHAYnH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c7:93:ec:bf:da:85:1b:7b:56:72:2f:2f:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=d3dc0220224bd48fec04cd9631014574afc6d514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:d4:52:3c:1e:11:cf:63:17:73:5f:b3:51:
71:10:60:0a:db:58:63:ab:be:18:c5:8f:54:40:a4:
07:ce:b1:29:f4:9d:8e:db:65:aa:9b:9e:15:a7:9d:
dd:8d:a3:71:50:ca:9b:69:56:a6:92:93:fc:53:d7:
19:90:76:75:52:69:7e:1b:cd:9b:60:39:43:e1:14:
2c:48:68:da:cf:0e:6a:c3:fb:6f:4f:b6:d0:18:b4:
70:da:d7:cd:8a:c3:00:35:1d:02:36:d5:15:de:42:
ea:3d:6e:b0:1c:e4:98:8d:a9:93:22:02:a9:97:ae:
73:72:eb:5b:f1:e0:9d:a2:9e:17:7c:fc:0d:16:5d:
2f:80:9d:9e:c1:e0:50:35:66:ec:61:e6:7e:cf:58:
c0:b2:b0:a1:c8:b1:0c:fc:ba:9f:0c:a7:98:76:8d:
5c:c0:a9:e5:e5:96:b2:0c:da:f8:6e:a9:e4:46:ad:
c2:eb:73:54:19:10:91:c2:df:a0:4b:65:cf:73:29:
3b:f8:77:d4:c0:ae:c6:5a:45:d1:54:59:42:06:b6:
ce:84:fa:b8:c4:5f:33:5b:67:c7:ba:02:ea:fb:74:
36:d5:68:12:88:53:a5:23:04:f2:c1:ac:3b:7d:f4:
cb:ef:28:a8:d6:8b:9a:ea:f1:0d:43:39:85:2b:24:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DC:02:20:22:4B:D4:8F:EC:04:CD:96:31:01:45:74:AF:C6:D5:14
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b0:15:fe:88:78:91:5a:15:4a:f3:06:dc:b5:7c:38:8d:1d:
29:7a:2c:04:0c:eb:70:08:15:89:87:fe:5e:f0:64:20:04:f9:
ef:e0:67:84:a5:45:40:01:6c:32:98:b8:03:49:0e:a7:1a:11:
cb:6e:9c:b3:68:10:74:77:cd:2c:94:e2:52:de:43:44:2b:75:
c1:00:f1:49:a9:75:c6:2d:68:18:cd:51:19:94:61:76:b2:9e:
15:a1:b7:b6:37:53:6a:55:75:12:28:7d:c6:f2:a4:10:0f:c6:
90:d2:c9:16:f8:c3:ed:e3:75:43:4f:6d:ec:9c:ca:91:be:9e:
00:40:0c:2a:ed:be:ea:69:dd:3d:67:11:17:b0:dd:71:44:ad:
4a:c2:3e:a8:df:69:53:60:82:a3:dc:a0:3f:fe:3a:60:98:d2:
c7:8e:3a:e5:1e:35:b2:38:ae:fb:ad:54:46:9a:9e:19:50:3b:
e3:b6:6d:e9:09:6a:2f:ff:a5:4e:d8:d2:77:2d:c2:c1:ff:55:
ae:09:9e:43:fd:1f:16:cf:59:79:28:cd:c8:10:a0:db:fc:b1:
04:5c:0c:6c:66:65:f7:c5:3e:44:26:82:5e:11:ce:28:7d:7d:
c2:f6:93:0b:06:90:9b:c7:9b:00:84:c6:0e:ec:fa:57:bf:55:
fe:98:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:56 2025 by rpki-client