Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: uD9FEK2aqQriPTQwik3gnEMUpal+Sh6YY2460eqnEo8=
Subject key identifier: B1:7F:EE:53:20:55:8F:15:9B:AC:62:BD:D4:CF:CA:B0:7E:09:3C:B7
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0199FC8F44F5B148B737D6FC1F2DF87624D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 0666
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: aVrjLBkMemfiSkPGlkOTgp66x57PGGcTbBd0Ez3gG4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:f5:b1:48:b7:37:d6:fc:1f:2d:f8:76:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=b17fee5320558f159bac62bdd4cfcab07e093cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:db:f8:2d:2e:a7:67:f9:a3:ef:3e:2f:de:
11:1f:17:c5:f1:6b:1f:6c:95:a1:d2:5a:f3:57:93:
66:2f:94:1c:7a:44:12:71:64:88:72:0a:06:e1:b6:
2e:f9:e0:fe:cb:cd:66:0d:4f:f2:0f:a1:4c:2d:85:
55:d8:c8:93:9c:b9:eb:86:b6:92:fb:b5:6f:8e:ab:
3a:0e:aa:1e:80:ec:43:cc:2a:01:47:d2:58:b1:b1:
1d:37:e2:f4:e9:17:9e:95:db:14:f6:06:5d:64:aa:
fc:8f:f2:7a:0e:ed:b8:98:10:13:cd:7a:4e:ad:61:
16:85:99:45:a9:91:56:f3:3c:57:a6:45:8c:38:53:
07:9a:b0:b4:bc:f1:5f:2e:cf:15:06:33:d8:b7:44:
3f:88:48:bf:54:28:ca:a3:b3:b0:4e:0f:43:60:d5:
c5:c3:35:42:65:d3:21:0c:7c:c2:61:13:05:c7:8d:
f1:ae:d4:a1:8b:e4:63:e1:c1:9d:23:8c:a7:e6:78:
41:2b:5c:a2:e4:d8:4d:b8:f1:93:ea:f5:24:dd:0c:
60:b0:0b:7e:66:1d:30:9c:c6:5c:b9:fc:44:f5:21:
60:ca:f0:dc:9b:88:92:7e:00:c3:c3:81:03:97:f5:
b1:41:fc:b9:89:3f:33:c8:b6:d8:43:a3:83:48:8b:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:EE:53:20:55:8F:15:9B:AC:62:BD:D4:CF:CA:B0:7E:09:3C:B7
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c7:c7:ce:e8:cc:2e:cd:93:51:23:88:4e:cd:b6:54:be:31:
1c:00:2b:81:51:b1:39:7f:51:07:fe:d9:8d:24:d3:e3:13:f6:
79:7a:8b:94:b3:bc:e0:c1:7b:a3:08:0b:b8:07:04:36:b7:68:
d5:ac:6d:55:5a:79:04:bd:51:7f:1b:04:eb:cf:84:67:a0:8d:
88:50:7d:dc:87:2f:f4:4d:b8:e8:c4:a0:4a:14:d3:a0:f3:a5:
e5:7f:17:6e:61:d8:5d:9c:b2:f3:81:be:84:41:26:75:71:00:
27:76:95:59:7c:5f:42:6f:a9:b7:4d:1e:bc:6c:fc:1d:a4:c5:
a8:15:84:bb:86:ae:7f:a2:0f:d5:7f:e1:3a:4b:4d:5d:85:b9:
e2:83:aa:0f:09:f5:37:bc:e0:62:32:4b:cb:eb:e7:aa:6b:58:
2a:60:65:31:18:69:f9:df:e1:30:d7:4a:3a:21:ad:a4:92:3b:
d7:3d:60:5e:25:c4:cc:9d:f7:e4:4b:da:9c:d9:fd:11:83:ba:
c1:f5:71:ad:c0:ee:a2:74:94:46:87:87:96:5a:6c:53:4c:e7:
8f:c1:b3:53:23:6d:7b:ac:21:92:ca:67:2d:63:5d:0f:57:3c:
82:01:65:b9:f4:ca:c7:75:60:76:a1:d9:74:2f:f5:77:ea:ee:
e4:a3:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:17 2025 by rpki-client