Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: 5YVmMlciWNK4rmlA7VtipemaKrJ2jEqZnwn42LokJlU=
Subject key identifier: 91:BC:1A:5C:D9:FE:7F:5C:0A:16:52:9C:5E:03:EA:90:10:4A:35:4C
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0197BAEB7CF438F6A923B0E058AD33023933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0A2D
Signing time: Sun 29 Jun 2025 09:01:24 +0000
Manifest this update: Sun 29 Jun 2025 09:01:24 +0000
Manifest next update: Mon 30 Jun 2025 09:01:24 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: Z0/cSUsYMK73UOPcy0+055gWPpetNQCvdEYx9xDk4xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:7c:f4:38:f6:a9:23:b0:e0:58:ad:33:02:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Jun 29 09:01:24 2025 GMT
Not After : Jun 30 09:01:24 2025 GMT
Subject: CN=91bc1a5cd9fe7f5c0a16529c5e03ea90104a354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:4f:8e:a4:31:a1:2d:14:a6:ee:8a:80:90:
ff:d6:b7:38:ac:ec:dd:7e:20:18:29:a2:b7:ce:ea:
c6:b5:2b:9f:83:f8:3c:d7:cf:ae:fe:22:2d:d0:13:
8a:8b:a2:a3:0e:0f:7d:5e:40:dc:ab:41:68:48:d8:
3a:94:e3:1e:5f:d7:36:f8:98:db:cf:0b:8c:8a:7a:
9b:41:87:62:d5:45:d9:61:bf:8c:07:b5:7f:f9:3d:
82:0d:92:e0:b2:4d:47:52:4a:03:6e:ee:42:6d:f5:
61:3d:b9:cf:ae:1b:90:63:39:49:6b:b7:48:21:41:
46:13:8c:cd:0d:94:56:79:96:08:9f:dc:24:50:e8:
48:fa:68:c7:fc:e4:47:c2:17:eb:35:61:30:70:2a:
51:af:18:43:65:34:40:36:48:53:97:27:db:87:4c:
92:46:ed:34:83:61:84:1a:7d:1c:69:41:f0:58:ee:
ce:a8:8b:fb:4f:2f:7c:3e:c4:b3:35:35:97:d9:55:
cb:75:70:3c:9d:44:b9:65:04:d9:87:c4:fd:c6:95:
75:75:b4:44:ad:1c:00:e8:48:36:0c:32:04:5d:97:
93:84:b4:f4:20:ce:8a:08:55:13:81:1f:da:c0:4d:
98:8c:b9:68:f1:94:35:6b:9b:ab:34:fa:a7:eb:af:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:1A:5C:D9:FE:7F:5C:0A:16:52:9C:5E:03:EA:90:10:4A:35:4C
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:88:17:ce:66:1e:7c:95:3e:be:c9:d1:19:7c:37:27:a1:
86:07:4f:50:c0:a3:41:7d:12:ce:ff:0a:4c:e6:8f:92:64:69:
d5:d2:3a:98:8b:ac:8d:48:79:0f:d8:49:00:f9:47:e6:22:87:
6b:95:cf:20:2a:fe:88:fe:c5:a5:a8:0a:d8:be:f9:11:ce:45:
7c:d9:19:99:9b:78:20:33:67:ad:62:b5:b3:70:a0:f1:6c:57:
7c:c1:64:b5:49:e0:06:63:2e:1f:ff:ea:57:de:d2:dd:ac:5c:
07:a6:0e:1c:c1:0c:6c:54:04:f7:67:8f:75:92:85:13:18:e8:
e0:31:a6:25:e8:4e:86:79:88:27:1f:fe:eb:dd:ce:6c:76:be:
81:18:87:c1:86:92:41:b1:48:cc:ce:c8:02:7a:de:ec:f4:38:
f0:67:e9:14:54:52:7a:55:c3:94:fa:93:cc:d7:87:01:0a:d7:
09:a8:0a:64:82:47:74:3c:60:2d:fc:50:64:62:fb:f8:77:23:
ab:a1:b3:6a:5b:73:ae:76:5b:af:2e:16:72:17:ac:ab:c0:56:
8c:48:0b:6b:c9:44:83:4e:21:8f:01:a4:25:67:83:36:ef:d2:
80:1b:8b:5f:94:16:35:45:73:23:58:06:e4:f8:39:62:2f:94:
36:fa:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:29:43 2025 by rpki-client