Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: dBALQiiC85hcfD8oVGRnJoxFXacUgvVQcu3JSNMKQJs=
Subject key identifier: 35:8B:D2:60:3C:BC:54:A1:5C:FD:ED:5F:A6:39:EE:66:66:E5:EB:C6
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 0198D472B2D6A77BDF1DCF6BF695FBDBCA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 13EE
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: HKVCCs4rNnl6z2X+OkKyQ5X/hSEiWgX5RqhbawO5opQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b2:d6:a7:7b:df:1d:cf:6b:f6:95:fb:db:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=358bd2603cbc54a15cfded5fa639ee6666e5ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:bb:6a:fb:5f:0b:26:cc:03:a1:84:55:5b:
98:49:da:a9:4f:76:ab:ba:05:6f:1f:0c:ba:a0:cc:
46:24:01:28:9e:c9:e7:57:c0:ac:27:63:71:e9:88:
03:75:d8:e4:73:77:87:54:bb:42:96:53:36:02:85:
1e:6d:e8:df:c5:a5:bf:b6:a0:21:b3:bc:52:cd:1b:
01:7d:78:ab:41:e0:1b:5d:33:81:23:39:62:9a:8f:
6b:46:48:b4:f1:79:b2:40:1a:82:9f:11:e7:35:47:
5a:da:f6:ed:13:e0:50:33:14:bb:36:7b:cc:c3:17:
98:39:40:ce:2b:cd:f8:62:c8:78:66:29:ba:80:1b:
45:5c:10:67:e8:b1:38:da:ca:b7:fa:2a:1e:29:f4:
a9:56:0b:61:cb:52:1f:ab:6a:59:32:d6:d1:d1:e6:
74:fd:08:a3:25:83:4e:7d:0b:4f:bb:ed:16:35:c4:
85:84:1a:a0:0c:92:88:3b:ff:81:30:79:31:2e:e9:
10:3b:07:51:2c:c8:94:2b:08:fc:5f:6b:74:1a:be:
a3:86:d9:ce:b5:95:0c:12:7c:74:db:48:13:7e:da:
29:72:eb:ba:1d:3f:bc:02:1e:72:b6:58:b0:41:0a:
f3:71:a5:c7:9d:36:5e:e6:6e:4c:7e:19:85:ac:f8:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:D2:60:3C:BC:54:A1:5C:FD:ED:5F:A6:39:EE:66:66:E5:EB:C6
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ad:4c:d7:ef:6b:db:fb:3f:7e:2d:ff:c1:e4:0e:46:69:68:
e9:ab:3b:f1:8a:4f:86:97:99:2e:a6:01:be:c1:41:fa:17:4a:
d7:13:d1:d4:51:df:e2:79:60:67:ba:2d:2d:71:78:c6:32:cf:
da:44:54:4b:eb:0b:c4:7f:63:ba:62:80:7a:9d:64:35:ea:81:
46:f2:7d:f0:67:11:ea:02:bb:53:8e:b3:fe:83:2b:d0:d5:8e:
d3:ad:cb:44:4e:fd:44:06:42:71:4c:91:a4:af:3f:29:c0:36:
de:5c:41:52:4f:05:99:9b:a3:68:75:83:90:ce:93:2c:09:c4:
35:6b:79:08:3a:b2:31:e6:bf:5c:f5:fd:d4:33:d0:90:29:6d:
73:df:aa:ad:d6:a0:38:18:8c:70:2f:0e:26:8f:bb:22:af:ce:
25:89:bb:23:52:75:94:c5:fb:4b:83:30:cc:d7:de:c9:cd:12:
60:e0:55:74:77:78:b0:35:1f:46:7e:25:d4:e0:a5:7b:4e:02:
e7:4c:8b:98:c9:4f:be:40:ca:24:ea:64:72:03:18:11:93:a1:
97:f4:33:40:96:51:05:6a:4c:a4:5d:42:af:52:41:e5:1e:a5:
9c:6e:5b:13:37:84:76:49:69:40:9b:74:d1:2f:a3:c9:bc:d5:
b5:ac:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:40 2025 by rpki-client