Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: Fmzy/KKujhEJIACBwMZC4gGJQlk5UNCq4eVuA7oGmNY=
Subject key identifier: 48:CD:8A:CC:CD:8D:3D:AB:FC:AF:79:87:83:15:E1:E0:68:B8:AE:76
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 019A71B90AFB8463CD193784A3B5173CED90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 1099
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: pmjI5YSw6Z27I6CTwdJduaw0qh1qCBXUXuRUe5LzPKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0a:fb:84:63:cd:19:37:84:a3:b5:17:3c:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=48cd8acccd8d3dabfcaf79878315e1e068b8ae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:c8:dc:60:f5:16:fd:f9:cb:52:8f:88:f1:
5d:0f:4b:8b:fd:6f:6f:90:23:a7:45:be:09:fa:94:
1d:fb:84:df:27:75:5b:58:d6:d4:1a:00:d0:0c:0e:
31:2c:0c:83:91:74:cd:5f:29:51:11:1b:2d:d3:f0:
0f:08:49:b2:b1:9c:9d:07:16:aa:1e:e8:e5:7c:44:
d8:5e:1b:8c:c7:e4:15:10:5b:c8:f2:ee:3d:f9:52:
d1:2e:31:83:4e:e5:ff:bf:cb:92:23:55:e9:13:8d:
1f:cc:e6:13:cd:9b:f3:92:4c:9a:ef:83:55:2e:b3:
03:89:d6:8e:54:07:d7:9e:30:e3:d2:c7:e7:1c:19:
27:b5:14:a2:99:43:25:e2:4e:89:9c:5a:c4:06:53:
93:59:2b:9f:f7:4f:b9:c7:23:4a:bc:f0:7b:55:52:
1f:d1:00:2e:f2:cf:d8:46:eb:4b:28:14:bd:02:82:
ba:4e:c8:2d:6e:7a:67:bb:87:ef:b7:c8:ab:b6:4e:
4f:c9:b2:ff:7f:fa:84:9c:0d:47:de:05:69:7f:67:
d9:83:3b:63:33:7a:39:52:67:0e:26:6a:44:92:17:
b9:86:bf:31:36:79:53:0b:c5:d5:69:2a:81:80:33:
87:e5:93:84:b5:e9:0b:74:e3:bc:15:ab:44:75:ca:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:8A:CC:CD:8D:3D:AB:FC:AF:79:87:83:15:E1:E0:68:B8:AE:76
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6d:e1:7b:95:24:52:07:2a:58:b1:39:f3:94:fb:19:c5:a7:
46:5b:c4:c1:fa:7f:03:b2:fd:76:5c:6a:7a:d2:f8:9e:af:a6:
0d:07:3e:3a:5f:2b:c7:fc:70:ec:d6:8d:59:7a:5f:06:d4:15:
60:b4:d4:3e:bf:bc:d4:84:c3:77:a1:a9:24:c8:98:97:4d:f9:
09:19:f7:10:65:cd:5a:ab:0b:d5:c5:86:76:d8:a0:97:04:b1:
8b:8c:da:82:4e:92:0f:69:cf:d5:1f:29:3d:58:44:b9:3d:4c:
05:18:24:86:f6:df:2b:d5:65:39:7e:58:02:95:0d:59:0a:b3:
c6:15:ef:d2:6b:b9:44:48:fd:bb:5a:11:22:2a:36:d3:dc:d9:
a4:34:7f:29:1c:91:02:68:a2:ad:58:51:2e:85:d5:cc:54:f0:
70:82:27:0e:a0:99:f5:c5:d8:11:3f:ce:54:e8:d1:cc:4e:6e:
d6:54:75:92:5f:85:5b:54:e4:66:2a:f9:e7:1a:24:5b:67:9a:
da:76:3c:74:a1:b3:b5:8d:b9:db:13:ba:ea:42:ef:cc:c4:e7:
1d:df:93:77:e6:81:0e:92:d9:5f:f0:2c:96:81:b1:80:57:7c:
b4:d7:00:a3:ab:ab:b1:15:be:b3:7f:86:dd:34:40:74:f2:0b:
c5:a3:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client