Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: u9P72gdSlh3ITks4YnyGYpRQDtt6sansgl/XxNw0Ho8=
Subject key identifier: 34:1B:50:AC:E5:58:3A:DF:78:5C:BA:3B:83:7C:76:FE:D1:B5:FA:9F
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019A71B95DDF430BFD8ED73DDE4FD6A77F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:44 +0000
Manifest this update: Tue 11 Nov 2025 07:02:44 +0000
Manifest next update: Wed 12 Nov 2025 07:02:44 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: n9ztE5vqrY/t9DtWmMd0jwTD3QEC7JBT63mOvrmI2z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:5d:df:43:0b:fd:8e:d7:3d:de:4f:d6:a7:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Nov 11 07:02:44 2025 GMT
Not After : Nov 12 07:02:44 2025 GMT
Subject: CN=341b50ace5583adf785cba3b837c76fed1b5fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:dd:56:05:67:72:54:33:21:f2:22:80:8a:
1f:7f:dc:19:b9:52:c5:f0:89:60:40:37:5d:7c:47:
1f:ae:70:fb:46:dc:f5:1f:9a:6e:98:23:a8:2c:6d:
4e:5e:29:2a:3e:24:e6:64:fb:af:ca:cb:44:d7:ee:
88:9a:ef:45:03:0c:bc:d7:54:1f:be:6b:17:7b:6f:
43:34:72:38:3c:cb:49:2f:5e:f1:18:84:71:8b:33:
26:ac:76:1a:eb:53:07:c4:02:a5:c7:14:9f:5b:a1:
6a:62:1f:e5:d6:2e:24:bd:13:be:ab:d0:1b:51:d8:
bc:34:45:b3:b8:a7:f5:5d:e1:94:97:a1:5b:78:a6:
c1:5d:1b:c0:67:f9:40:45:ea:45:3b:0e:6f:69:ef:
23:e9:49:a4:37:31:ad:db:10:64:66:ab:18:f1:c2:
0a:00:ec:8c:20:51:db:1a:a9:20:ca:5d:9a:c1:7b:
b2:1b:a2:8b:8e:90:0f:a5:de:76:72:ae:d1:32:b9:
86:a4:67:b1:35:86:34:4e:1c:67:be:59:d3:e4:69:
62:4e:bc:7e:81:5b:37:52:b6:95:db:66:94:12:6a:
d3:6a:9d:d1:a8:11:67:de:54:95:0d:fb:3b:56:42:
da:68:9f:e9:0f:88:78:8d:48:71:cf:6c:a3:e4:fe:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:50:AC:E5:58:3A:DF:78:5C:BA:3B:83:7C:76:FE:D1:B5:FA:9F
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:9c:4c:33:81:6d:71:b1:14:e8:04:8b:c1:ba:33:5b:fc:
10:6d:c1:5b:c9:2f:54:ee:b0:e1:2c:5b:60:58:1a:34:ff:8c:
47:34:64:48:fc:bb:d2:40:1c:f4:c6:1c:4b:26:e7:59:6e:ba:
13:b7:f5:bd:9c:b0:f4:d8:13:44:54:5d:bd:41:c8:19:72:39:
2e:26:2d:c3:89:19:bb:b4:0f:73:f6:b4:ef:ba:67:81:08:d0:
b0:db:b5:d9:ca:29:81:e8:cb:80:cb:99:95:20:9c:65:9e:8d:
d6:7b:ba:9c:db:11:07:3c:e4:8d:77:5d:22:f1:7e:7a:83:6a:
b7:4c:85:88:ad:eb:84:04:ac:cb:51:7a:d2:88:b0:a4:a2:bd:
29:05:8a:9a:3a:20:06:52:bb:40:89:6f:8c:38:57:96:7a:98:
30:c2:43:fb:27:da:0b:7b:b3:f3:bf:29:3c:77:2e:94:bc:d5:
55:51:c7:f7:b2:ca:3a:e1:74:29:fd:5b:b4:98:dd:d8:30:c4:
08:0b:13:60:38:e1:02:76:93:ef:f0:77:1b:e2:f5:05:da:b8:
c6:68:8f:73:d9:dc:99:b0:5f:b4:8f:0f:db:ed:77:6b:7a:e8:
ba:da:f8:bf:1f:9b:30:5f:51:ab:af:2c:f4:da:1b:86:76:1d:
52:9d:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:39 2025 by rpki-client