Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: kn2ej1ovFJJUlZdzGa2WEXEcWaCXEBbp+pyvzhXfWco=
Subject key identifier: 1D:D3:AD:1A:D6:69:70:64:57:F4:46:55:30:4A:BB:9F:90:2D:F7:65
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0199FC5906E6793DCAAF7F3DA2659E96C775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: dE7nTf3Du4gYPDpwYkTRVO3O24aY0U+d4LkWz40cpeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:06:e6:79:3d:ca:af:7f:3d:a2:65:9e:96:c7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=1dd3ad1ad669706457f44655304abb9f902df765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:a4:41:2e:cb:73:51:77:ac:e8:4f:d8:50:
4b:e2:87:ad:7a:83:1e:4d:9a:01:76:18:fb:40:d9:
23:67:ce:21:e0:5f:1f:dd:55:d8:93:30:c0:df:4e:
07:a3:cd:4c:7e:99:86:f9:6b:2c:ba:28:bd:31:5e:
d6:e0:f0:9d:e5:e8:e0:51:3e:d3:48:fe:f1:ce:6a:
85:9f:b1:58:86:e2:ba:5c:6d:f6:aa:52:0f:30:b3:
f6:cd:ec:78:3e:66:32:1f:94:24:de:90:2f:05:a9:
ef:03:0f:2b:94:41:cf:46:3c:94:f6:dc:b5:2f:a0:
e8:ef:dd:fd:e1:47:4b:2f:b4:f1:66:bf:af:f8:dc:
c3:60:55:5c:13:19:36:79:a4:6c:ea:ae:5f:a1:ac:
5b:ff:9b:90:ba:23:99:8d:77:96:3a:44:ed:2a:97:
ab:3d:c5:f9:44:03:78:65:f9:21:73:f2:6e:89:ae:
24:d8:76:e4:1f:a6:ce:37:f9:e7:5f:6a:15:0a:2c:
26:ba:8b:86:3c:95:4d:20:4d:00:78:1b:a6:d9:6c:
29:d0:99:5c:0d:70:5c:3d:cf:96:d7:5b:85:eb:a8:
35:c5:55:c2:37:4f:59:67:b3:56:c7:ab:4f:e2:00:
a9:8d:b2:b5:6f:61:23:35:68:6e:f3:6c:3c:b8:9f:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D3:AD:1A:D6:69:70:64:57:F4:46:55:30:4A:BB:9F:90:2D:F7:65
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1e:8a:c5:bf:76:f4:ad:11:13:e0:a7:78:2a:3a:19:91:69:
30:84:cc:6e:9d:74:61:09:c4:e8:79:90:f7:94:c5:31:ec:5e:
66:a0:b5:35:18:72:70:12:d0:59:bd:e9:6b:1a:9c:3c:f6:21:
d3:5a:ba:5d:04:20:b2:15:d6:99:63:80:31:66:f1:b4:61:15:
ec:5f:97:67:e2:c6:17:6c:32:be:3d:87:0d:02:80:dd:69:7d:
42:8b:e5:e5:d2:c4:88:96:3a:e0:a9:97:0b:38:a6:3b:8b:79:
51:cf:ae:0f:e3:5e:e4:44:76:5a:92:9e:6b:32:ad:ed:27:90:
18:ac:1e:55:ae:b8:16:ea:cc:fa:41:06:c6:1a:1a:3a:2b:b7:
fa:00:08:20:64:bb:49:73:6f:da:5a:b6:37:bb:37:3e:f2:ca:
5a:1d:21:56:1b:82:a9:bb:d8:4e:6a:e6:c3:35:f0:b1:a0:80:
e7:52:ac:0b:84:06:c7:7f:41:22:95:c0:14:e8:59:86:98:ac:
6b:7d:9c:28:38:e5:8d:a2:bf:1f:42:2b:c0:63:d6:98:43:8c:
12:95:37:1a:1a:01:fa:a8:80:68:38:50:e3:67:7c:7b:b6:58:
02:f1:67:c1:19:ea:45:29:e9:5c:cc:b9:c1:be:33:17:ef:9b:
70:61:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:42 2025 by rpki-client