Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
File: Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json)
Hash identifier: Q8IbhI7WF7Ek0IodwMfXxH28H8rR9M9AUzjCMMJMugc=
Subject key identifier: 23:8E:4E:77:81:03:5B:12:0F:0C:02:19:3A:81:09:CA:DA:78:D4:58
Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
Certificate issuer: /CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Certificate serial: 0199FC8F3ECA82CA61D4F246BD73599423BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: MTQoXwm/VZb5KDwRcLANEa885TVoXV3G60JjpSmysFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3e:ca:82:ca:61:d4:f2:46:bd:73:59:94:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=238e4e7781035b120f0c02193a8109cada78d458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:b5:4f:bc:4e:e2:a5:46:0b:f2:64:75:ad:
0b:15:d6:4b:2f:0b:1d:1f:be:f7:15:e4:78:f4:29:
e9:7e:01:67:d4:f6:e7:17:f5:74:ed:af:ed:51:b7:
24:fe:c6:00:5a:56:c8:79:61:66:85:57:b6:ac:37:
5b:1a:10:cc:3d:c1:02:2b:f5:8a:22:49:45:43:ec:
77:6c:b8:0a:03:1b:78:e6:e3:bf:aa:e0:0d:be:58:
08:a5:73:ab:7e:1f:1f:bf:0f:67:0c:d6:31:4e:83:
c1:f7:4a:dd:b9:e7:26:bb:9f:dd:9e:4a:3f:5b:ab:
5f:7f:25:d4:69:97:9a:8d:fa:cd:ad:e3:fd:6e:70:
a1:30:67:55:26:b0:1d:ce:fe:6c:f5:5f:5f:af:db:
cc:23:47:9f:79:56:f2:19:aa:63:60:01:67:a6:36:
07:db:0d:5d:9b:89:03:67:94:ab:4e:fe:b8:6d:22:
f3:d6:32:45:a2:c0:13:ab:dd:0c:a1:15:48:3b:44:
82:6d:ff:f8:0d:bd:41:e6:ed:8d:52:71:3a:f0:55:
a1:bd:eb:6a:9d:ed:45:a9:bf:17:61:09:43:e5:f2:
1f:55:a9:2d:27:01:1b:97:c0:32:1b:49:21:cb:9e:
48:55:01:82:42:21:46:96:0a:40:13:fb:1c:e2:9d:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:4E:77:81:03:5B:12:0F:0C:02:19:3A:81:09:CA:DA:78:D4:58
X509v3 Authority Key Identifier:
keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f5:88:fb:32:8f:65:89:f2:d1:5b:d8:00:5c:47:93:5d:3f:
2a:0d:ee:05:7d:a6:55:d8:90:78:1d:c0:c1:82:9c:f4:e3:7f:
4e:c0:82:40:3e:6e:1c:df:b0:db:3d:ac:9a:f0:bb:02:74:d3:
dd:67:cf:67:32:e0:9d:74:20:a7:6e:4d:2e:fe:a1:57:60:d9:
54:31:ef:c4:f0:b5:61:48:19:a7:72:81:d0:89:af:ea:e0:b9:
58:86:d9:c3:0f:f1:a5:f0:d5:72:38:a1:eb:6f:2a:3e:10:a9:
78:30:15:39:8b:f6:cb:a6:5a:da:c9:7a:28:7e:62:dc:f4:74:
c1:d9:7d:67:c1:6e:63:a6:4f:1b:8a:14:f2:58:46:95:bf:01:
d4:5f:8a:24:8b:59:21:f0:04:18:74:28:3e:02:6c:55:08:7d:
a5:7a:a4:16:58:22:c2:3a:c2:07:0d:39:33:7d:c1:00:11:9c:
e8:96:7d:49:8e:ad:c0:03:65:fe:9f:d2:a3:eb:67:0a:77:79:
5c:52:57:40:d9:5f:77:90:a8:ec:8e:79:8e:c3:55:7a:5c:85:
9d:5c:2c:a3:8a:5b:68:56:73:dd:4b:64:9d:22:96:01:3f:96:
1c:53:d1:a8:59:da:e8:5a:b4:2b:c9:bf:eb:7d:ab:f1:0a:32:
4e:cf:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:32 2025 by rpki-client