Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: 8rlvGlgg5orXKz8hHxRwTKJqlwSR8ibEEXIlizsssoI=
Subject key identifier: 9B:41:E9:33:EF:02:8E:E0:8E:5F:67:9A:97:2E:E6:8B:BF:70:91:B1
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0198D66029202C27DD104B5C523ED81E2B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0F49
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: TmZHVq+YM7+09PZjbY9YBY/cx0+G6/abmrHKWH30gOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:29:20:2c:27:dd:10:4b:5c:52:3e:d8:1e:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=9b41e933ef028ee08e5f679a972ee68bbf7091b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:ef:f9:cd:54:6e:96:30:c1:27:cc:51:2f:
9a:34:38:98:4f:23:f1:1e:b5:de:57:1d:1d:3e:cf:
88:c7:22:49:a3:da:50:08:86:73:d1:40:30:6d:50:
dc:2a:59:b9:26:3f:24:76:29:d2:dc:28:80:d5:5c:
cf:2f:64:1f:0c:9a:1d:d4:b7:42:95:07:a1:1b:79:
f3:cc:fc:7a:20:fa:74:53:7a:b9:e8:ea:59:83:b5:
ce:c4:22:61:e1:da:80:cd:06:a8:d4:d8:f9:91:3d:
fd:1c:63:df:03:db:88:46:78:9b:18:52:26:57:f6:
f8:bc:8e:bf:cb:a7:96:54:6e:e1:ed:65:84:5e:3c:
26:dc:e2:de:67:e8:38:99:69:f9:e8:8c:80:52:d2:
4b:91:b4:17:77:a2:8f:3e:a0:30:e8:b2:96:4d:d1:
b3:7b:d0:2c:c1:83:76:ee:6f:7d:4e:03:c3:ca:f2:
18:aa:ce:0a:08:b1:e9:3a:08:dc:2e:d6:ef:e6:85:
11:60:68:76:e5:58:0e:90:81:b4:7b:b3:50:2e:40:
13:04:22:02:bd:58:64:a5:da:f4:e5:ab:4a:63:07:
cd:24:dc:36:c9:2d:55:b6:bf:fc:f2:7f:8c:dc:a3:
e9:72:ce:0b:8c:3c:f0:41:d1:17:29:1a:67:7e:62:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:E9:33:EF:02:8E:E0:8E:5F:67:9A:97:2E:E6:8B:BF:70:91:B1
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:17:78:d4:c3:c4:34:a1:c5:58:49:e3:c7:47:54:c0:d2:38:
12:f6:0d:6b:ad:d1:2c:81:c8:b5:56:77:d8:58:75:31:07:7d:
d7:d4:f1:8d:64:5b:20:2c:0a:9b:2b:bb:4c:ba:1a:0e:b7:6a:
3a:27:54:5e:32:5f:79:b7:03:60:3c:4d:5b:da:01:24:9a:23:
b8:af:b3:85:e9:d8:df:af:d4:d8:76:31:6f:8a:b3:71:f6:af:
df:a6:53:9a:eb:0d:4f:c7:e1:10:48:cd:a2:99:4a:56:53:62:
29:f8:aa:56:6b:f7:a3:d8:e8:a9:65:64:07:4c:ac:64:34:f9:
7f:49:d7:30:af:78:85:d2:e7:28:f4:ba:f6:33:aa:ff:36:cb:
0b:3f:c2:4e:7e:96:0c:b9:92:d6:7a:46:29:f2:17:ed:70:8a:
4b:27:28:ea:52:e3:17:c7:f0:ed:0d:df:0c:38:a3:4a:2c:7d:
83:cb:a1:44:c7:7d:c2:ff:17:fc:e8:f5:b5:4b:42:99:4b:39:
28:ac:47:0f:f1:42:da:ff:cb:45:59:bd:5c:fa:04:5f:95:16:
cf:25:a2:72:c5:1e:7d:f3:b9:25:79:69:8d:e7:2f:4f:8a:ec:
75:f2:30:23:e4:5d:42:ec:38:30:87:b8:9d:0a:8b:9a:eb:46:
96:f8:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:14 2025 by rpki-client