Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: evZpSf72OvXPrhQaUXAuCYmSPxDTuZcJJdVtukuU950=
Subject key identifier: E9:AB:15:7E:A5:34:15:22:FD:79:FE:77:34:B6:DA:1C:9B:37:AF:A2
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 0198D66156E295E69A546CD4304AFD6C32C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0CD1
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: jGSVdhtOtzPeDFZCA8fmPysdz0O79SwUaBHYDD3Vl9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:56:e2:95:e6:9a:54:6c:d4:30:4a:fd:6c:32:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=e9ab157ea5341522fd79fe7734b6da1c9b37afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:55:4f:6b:3b:ba:e2:ee:9d:e5:d8:77:cb:
8a:67:db:0e:b8:c6:8d:26:b9:9b:8c:bc:7b:a8:38:
bc:08:13:ef:17:3e:d0:fc:98:49:45:55:a1:4f:5b:
e5:9f:57:54:13:7b:24:ec:d7:e0:4a:4a:f2:4c:d7:
d0:49:96:67:65:2e:6e:8c:72:8d:63:8f:a0:c4:40:
f2:12:4b:7b:c5:24:0d:79:98:d6:e5:fe:29:9b:ca:
13:92:0d:8e:8f:a8:03:e7:fb:c8:66:e3:24:00:e2:
a6:ed:6b:9f:9c:63:52:16:86:d6:6c:28:55:40:e4:
74:2b:ba:ef:51:c8:d8:7e:da:73:f0:25:1a:b4:8f:
31:1e:76:84:28:0b:74:27:94:da:dc:58:ad:15:a7:
2f:b4:66:fa:33:39:a5:44:56:7f:e7:44:02:b8:d5:
f7:21:9f:c4:d7:21:9b:fb:a9:ed:cb:80:08:d4:5c:
cf:57:26:09:6e:d6:05:82:06:90:f5:1d:d8:e7:99:
b8:04:19:fa:54:d5:5c:38:a6:97:59:df:43:17:23:
dd:c1:9f:34:06:0a:aa:e5:fc:a8:90:00:e4:8c:1e:
41:77:af:db:db:50:10:6d:f2:80:0d:04:63:be:0c:
82:54:8e:6d:35:b2:59:63:44:0e:f1:c3:78:29:5a:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AB:15:7E:A5:34:15:22:FD:79:FE:77:34:B6:DA:1C:9B:37:AF:A2
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4c:c6:d7:45:3f:bd:d1:26:ed:2c:33:d7:32:25:78:fd:4c:
4f:2d:9c:1d:bb:17:15:ce:e8:7f:51:b0:3c:d6:3e:37:86:85:
4f:62:33:05:f7:7d:f2:3a:62:5f:ec:c4:57:25:76:b2:8c:62:
21:b6:8a:f4:15:62:78:dd:35:b5:d5:68:c2:c7:5f:83:2d:1c:
71:18:14:19:97:29:19:e5:9a:a4:fc:6d:31:ac:29:9d:81:bf:
12:a9:6a:13:6b:82:de:9f:e9:be:08:ee:75:88:08:43:10:99:
84:f4:17:be:ac:d4:e0:c1:1f:0c:b8:ae:b4:91:22:13:41:fd:
98:37:af:d6:d8:29:d2:e1:86:2f:48:d3:73:55:24:60:f9:5a:
c4:ae:39:01:11:f7:3f:0c:81:c9:b5:2f:0e:34:e6:14:69:f3:
d0:fd:73:c2:a2:b6:0d:3d:c2:4c:6a:43:1d:db:ee:65:cb:a8:
21:a1:49:3c:ed:cc:92:50:f0:ea:6b:d9:9a:9f:60:4c:9e:24:
fb:94:49:e9:4b:1a:b4:4f:f5:0f:0a:1a:8e:44:77:64:16:81:
27:a9:cf:c3:04:70:bd:10:59:84:ab:aa:d7:6d:79:8b:8c:51:
74:cb:7e:68:65:76:23:19:e3:ee:76:b9:8b:08:e0:e8:27:de:
a8:53:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:21 2025 by rpki-client