Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: w0ya+fsTxDwGZCu5d6wQ1hIlaFHREV/u4Wy8D/6KEao=
Subject key identifier: E1:38:BA:96:8D:EA:ED:0A:50:EE:8D:8B:7C:AA:44:45:DA:2E:89:84
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0198D8BD74ABA6B6636AB443921850E041F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0AC1
Signing time: Sat 23 Aug 2025 21:02:31 +0000
Manifest this update: Sat 23 Aug 2025 21:02:31 +0000
Manifest next update: Sun 24 Aug 2025 21:02:31 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: /3I8WGuc3Qerl4+Ut8NU2lV8HCXbucVzo+AWajWRJwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:74:ab:a6:b6:63:6a:b4:43:92:18:50:e0:41:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Aug 23 21:02:31 2025 GMT
Not After : Aug 24 21:02:31 2025 GMT
Subject: CN=e138ba968deaed0a50ee8d8b7caa4445da2e8984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:8f:99:12:c1:c2:b5:31:45:8e:43:16:3b:
49:c9:21:e0:31:43:45:34:8a:80:83:e3:18:8b:ae:
b9:47:f7:05:cd:da:ea:c4:ab:a0:a3:f8:4c:84:05:
66:22:a8:94:62:95:ea:c7:90:e9:32:85:75:4c:1c:
c8:c6:3a:1e:1a:f8:f9:72:ae:a1:91:84:83:04:a6:
91:b0:26:de:b4:e3:ae:92:20:ed:2d:b2:d9:1d:98:
5d:74:da:4b:6f:c4:6d:97:03:eb:42:86:df:50:62:
be:4f:b8:5f:5a:3f:55:60:2a:db:8d:33:43:bf:c0:
d4:85:d9:63:9f:d5:e0:69:ed:1e:e8:7f:35:7f:0d:
4c:1f:03:2e:fd:79:8b:be:1c:60:ab:1d:13:8b:bd:
c7:c5:1d:36:6d:c0:61:88:ba:b0:4f:79:22:32:73:
cb:e2:35:b0:51:d2:d0:2b:1f:82:d0:c4:eb:3d:27:
6f:a7:60:7f:49:eb:d4:8e:39:bb:70:1d:ad:7e:53:
d3:eb:24:2f:b4:17:d9:6b:0a:a6:a7:51:7f:dc:9c:
75:07:35:0c:8e:c1:a9:5f:da:87:95:f8:65:6c:02:
9c:74:50:9b:07:b8:6a:67:a5:23:3f:69:0a:11:e1:
40:27:c5:05:4a:61:83:e6:34:a8:c0:b7:73:39:e6:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:38:BA:96:8D:EA:ED:0A:50:EE:8D:8B:7C:AA:44:45:DA:2E:89:84
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:05:00:d8:eb:12:57:79:76:7b:66:16:1b:9d:d6:05:39:99:
6f:91:83:3d:23:10:fe:65:0d:37:7d:dd:cb:d7:64:39:bc:3e:
e5:ce:d3:06:27:37:39:6b:ba:75:74:ea:5c:20:6c:e4:c8:5e:
41:2b:fa:3f:6a:26:5c:8f:a7:67:8c:ea:03:ab:f5:80:4f:e4:
8c:8e:82:a5:b7:da:c6:f3:00:6d:bb:30:fa:df:45:81:83:b1:
5c:ce:dc:12:0b:0b:c6:11:0e:57:16:d1:46:e1:b5:ca:2e:ba:
99:39:e5:8f:be:f7:14:66:48:84:42:ec:ca:23:62:56:6e:cc:
96:e7:4e:90:14:a4:ec:d9:67:d4:cf:7d:de:e5:80:98:a2:09:
02:4b:ae:77:ae:51:b3:80:cc:ec:f4:15:c1:c4:7d:fb:52:ec:
ed:1b:f3:9a:f2:72:9a:94:82:7d:23:12:a6:55:30:a6:60:39:
24:d5:80:fd:e1:45:8c:38:e5:aa:56:48:73:55:f0:ec:15:d1:
bb:89:35:c9:8b:b5:58:36:d0:f0:82:de:85:6b:a7:ec:e2:01:
90:f0:1a:48:7e:9f:45:f8:70:7b:2a:65:f7:82:3e:63:ac:66:
19:39:92:7e:1c:51:08:18:9e:6b:4f:6e:0d:41:20:d0:3e:e8:
ea:81:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:27:23 2025 by rpki-client