Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: ZwPvZ2/VX3j1SbWihXwLyMet6GZmZIfLumTN5DA/vqE=
Subject key identifier: 42:7E:78:87:FE:BE:4D:C0:44:9B:EA:08:25:D0:04:73:49:DB:29:49
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 019923A037C396B4841DBB7705FC77EA9B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0EE3
Signing time: Sun 07 Sep 2025 10:02:06 +0000
Manifest this update: Sun 07 Sep 2025 10:02:06 +0000
Manifest next update: Mon 08 Sep 2025 10:02:06 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: PhFfUEYKQyzdmugN8haeNZD3YZpjzP7JGw9SHqH9GwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:37:c3:96:b4:84:1d:bb:77:05:fc:77:ea:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Sep 7 10:02:06 2025 GMT
Not After : Sep 8 10:02:06 2025 GMT
Subject: CN=427e7887febe4dc0449bea0825d0047349db2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:cc:2d:17:06:3b:4f:4b:bd:e9:6e:20:2d:
d3:a2:f9:39:5b:e1:1d:32:76:ca:1c:1f:e8:53:87:
07:c6:2a:86:53:d2:4d:6a:38:44:82:3d:4b:18:07:
c0:36:47:bb:a0:70:20:4d:04:20:53:95:0d:22:b8:
08:cc:bb:73:55:2c:0c:31:c7:0d:6b:73:22:e3:c0:
09:56:0c:c1:6a:6c:c7:e8:99:9c:80:7e:51:79:5c:
81:84:00:89:3d:69:71:7e:33:ff:35:1d:3c:c9:ff:
46:85:10:c1:1d:18:eb:6a:af:37:92:7c:3c:24:9f:
cc:c9:94:27:84:52:4a:05:5a:f1:50:e3:fb:d8:86:
4e:e7:ab:5c:23:9d:de:59:a6:05:ba:25:f3:64:81:
af:cc:c1:a1:57:35:72:0b:0f:e5:cc:9c:0d:12:e6:
6d:b8:43:f4:d4:f0:1f:33:a4:08:d4:5c:2d:c7:e5:
e7:e8:96:30:87:90:36:79:f1:ab:e9:64:b9:e9:3f:
bb:9d:43:13:d2:52:56:4e:4e:ca:f2:28:06:f8:f3:
13:5e:80:2a:2d:ad:88:d3:07:ad:a9:b8:1f:1a:f3:
25:55:50:a8:d8:ab:cd:7c:dc:f3:fa:81:5b:e0:28:
40:0f:f9:6b:0c:2e:26:63:22:20:16:72:49:39:76:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7E:78:87:FE:BE:4D:C0:44:9B:EA:08:25:D0:04:73:49:DB:29:49
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:d5:75:c7:ce:c2:2e:39:8d:4d:e0:e5:c3:4c:01:85:a4:
d5:ca:94:9c:89:4e:40:6e:c8:37:fe:ac:54:85:6a:52:5b:06:
c4:af:aa:21:89:fe:ae:65:20:84:56:8e:ca:16:85:ec:66:d4:
49:ed:71:38:06:7a:d4:cd:16:49:20:a6:bd:a4:9f:05:91:68:
4f:0a:1b:2a:3d:69:86:1c:b5:8c:e5:ca:4d:24:b1:b2:d2:30:
44:4c:4e:6a:32:73:b0:c8:34:48:51:b7:b5:af:f4:e6:8e:ea:
69:c8:73:c2:09:f0:01:34:dd:36:32:19:85:f4:48:71:7b:c4:
3d:5d:f9:da:8e:72:9b:43:d1:c8:cc:12:f7:b8:98:9f:51:2f:
18:2f:b0:76:65:2a:f1:7a:1d:5b:8a:f4:64:0b:97:72:0f:f6:
c1:b4:b2:91:d7:95:52:1f:0d:22:95:61:1c:28:73:29:8b:65:
9c:bc:6c:eb:8d:1c:cc:ed:af:4a:91:55:62:0e:0d:fc:75:c1:
9b:ea:14:95:ce:c0:b1:e1:6a:71:2b:00:4f:ad:db:16:6f:f3:
00:67:2a:81:47:03:c9:4c:db:1c:82:4c:5e:f7:a0:1c:8b:b6:
24:cf:b9:e7:18:23:4d:37:bb:84:5f:2c:a2:05:a6:18:20:63:
b6:ce:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:17 2025 by rpki-client