Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: PjUmbhcIjo61U1SdwJezMgOlOyIJ+bbP0gNaLfWNgrk=
Subject key identifier: AE:03:50:BC:32:7F:CC:E1:CF:B6:A9:49:54:4E:18:5A:3B:12:C7:14
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 0198D5BBAD2A1271055A5499EEF5DC361CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: uExG7KQNqER3mNYa2YCjuTci2KS8MhJE1VcWBOcqYDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ad:2a:12:71:05:5a:54:99:ee:f5:dc:36:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=ae0350bc327fcce1cfb6a949544e185a3b12c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:68:6e:e9:03:d4:8a:27:72:52:b5:34:f2:
10:ab:c0:4d:18:2c:11:48:30:14:7f:89:4d:38:6d:
cb:65:b9:d5:b0:5f:15:a0:94:85:bb:64:80:3b:35:
3c:4f:22:38:68:e0:53:a1:c2:e5:1c:53:42:25:d0:
7a:da:77:6f:3d:08:9f:80:71:c7:08:50:2e:d0:27:
91:79:73:cc:22:f9:56:c6:23:09:10:0e:ee:3d:c6:
7a:0f:9c:b8:3f:b6:99:a1:a1:19:46:45:c0:bc:3a:
1a:5b:6f:3a:10:69:7e:0a:cb:7c:c7:e3:46:4f:76:
94:23:ca:80:04:cd:20:cf:a8:cb:31:43:1b:eb:90:
85:42:c2:88:76:31:82:9a:82:18:b6:57:a0:42:cf:
2d:24:da:10:73:7f:c5:5a:d8:38:68:c7:79:88:c1:
e9:98:27:68:88:98:19:2f:93:06:89:5d:56:05:a1:
6a:0e:2c:ea:9e:ab:11:d7:b8:19:9a:ec:89:e3:ca:
90:2b:d8:2e:31:ac:fd:ad:27:5f:13:73:bb:39:90:
2f:89:71:9d:d6:34:4c:36:1b:95:39:5a:99:8e:20:
d6:a9:7d:eb:0d:13:9e:ac:fd:e1:74:a8:8b:85:57:
77:2c:2a:1b:e9:35:fa:5c:77:29:27:21:61:98:0b:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:50:BC:32:7F:CC:E1:CF:B6:A9:49:54:4E:18:5A:3B:12:C7:14
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:72:fb:1c:2c:b3:c8:46:bc:8e:9a:94:f0:06:f3:69:71:d5:
82:27:20:f4:0a:61:0f:f7:9f:c7:84:19:f1:82:ab:13:7c:47:
09:d1:bc:35:6a:f3:df:cc:55:b3:21:e7:82:5c:6d:8b:ed:fb:
10:66:56:6d:7a:56:29:bd:e8:da:99:63:7e:c2:69:60:0a:1d:
1f:10:d4:04:2b:e1:b3:df:19:71:4b:5e:f8:b4:bd:f0:99:c7:
d6:b3:f7:77:ee:ce:d8:a1:5b:9e:a0:d2:78:33:62:30:3f:24:
4b:0b:c9:55:2e:84:29:9e:20:7d:a6:22:f0:0b:5e:38:2e:b4:
24:04:6a:47:e9:49:b8:09:78:b9:9f:cc:2e:1b:6f:19:5b:aa:
b0:ba:5e:2a:e9:fe:34:e4:ca:32:a5:f2:de:0e:58:51:85:6d:
19:58:11:2c:35:77:c2:fa:52:4a:a3:0f:1a:03:3f:71:4d:8e:
11:25:a4:23:87:fe:57:ad:eb:58:69:8c:47:f7:68:ee:e7:d4:
87:2a:79:2c:a8:b1:9e:f9:9d:76:7e:a6:9f:eb:ca:ce:45:9f:
f7:23:d0:e5:18:d7:ba:d1:5f:6b:b8:33:4e:25:ae:9b:2f:d1:
40:04:1e:b7:10:0f:3d:67:f2:0f:61:40:6c:d6:38:37:cb:e0:
7a:52:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:52 2025 by rpki-client