Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: NHrh6wvabZ4CWAnDJtnbmJL5c3nsDYGhFBd9ADYyr1E=
Subject key identifier: B9:F0:15:C6:86:2F:DF:A3:88:57:5F:02:5B:5F:42:40:13:B3:47:7A
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 0198D474426F29AF721E2278F3BC8DF04FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0EBA
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: +q41Ghcj8bfocIZJ4SkMmpwi0amf90KdCB85sW4xupA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:42:6f:29:af:72:1e:22:78:f3:bc:8d:f0:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=b9f015c6862fdfa388575f025b5f424013b3477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:10:04:ed:69:d8:7e:3f:d6:2d:04:ec:7c:
f3:82:2e:30:4b:f6:3f:f0:3f:4c:29:c0:a9:87:9f:
ba:7f:26:2e:72:4b:5a:f8:a1:dd:ab:29:97:a6:c8:
5a:08:11:4f:56:f7:a0:3f:60:8f:bd:aa:91:fb:1a:
af:fa:cb:df:79:84:dc:7a:9a:01:41:e5:cb:79:aa:
e2:b5:48:15:73:90:52:7a:0a:8b:77:51:ac:de:c2:
cb:81:21:6c:31:bc:74:a2:e8:6e:a9:76:5c:52:18:
58:a8:81:79:65:86:ef:f0:5b:f6:4d:e0:27:4f:80:
4d:12:2c:b5:63:e3:c6:a1:98:42:90:cb:28:67:fd:
c2:b5:98:21:48:d3:95:27:1c:ee:51:38:04:76:07:
66:57:8b:cf:cb:2d:50:6e:b8:7c:c2:34:f2:ac:5e:
e4:f2:0d:7b:8f:bb:da:17:b6:8b:7c:56:a0:c7:0b:
b3:e1:ad:b0:57:0d:f2:85:c7:63:db:1c:d9:c2:87:
2b:6f:51:7f:90:3d:f6:f7:27:3d:53:29:0c:6c:14:
30:22:63:2f:5d:d7:2e:6e:fc:83:f1:52:e8:ef:21:
b8:0f:32:47:54:2c:7f:e5:fb:18:63:7a:31:99:30:
1b:36:cf:64:62:92:91:21:e1:8c:74:bc:3a:86:5c:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:15:C6:86:2F:DF:A3:88:57:5F:02:5B:5F:42:40:13:B3:47:7A
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:05:79:64:4f:8f:75:47:53:14:63:ae:d2:3e:ed:d1:07:88:
44:86:33:f3:29:55:11:99:33:9e:a7:47:df:79:9c:fc:96:ce:
3f:27:24:08:52:d6:b7:49:89:87:e0:70:a6:30:a8:07:45:3e:
e8:92:0a:8a:10:f2:42:9b:54:26:7a:1c:2f:83:93:b5:18:d3:
03:1e:6b:3a:ab:e9:62:8b:44:36:2b:47:7b:7d:f8:22:44:e1:
cc:d3:b7:7c:74:78:9a:b3:b2:31:00:71:23:a7:da:00:59:d8:
33:1b:27:5d:68:6f:be:6b:72:6c:ac:ba:c9:9e:3e:1e:5b:e7:
be:10:2d:d1:a0:d2:72:1f:c5:0c:bc:9c:20:94:b8:89:e2:2f:
8a:77:cd:01:c4:e0:81:a9:ea:59:86:46:3e:8c:cb:2b:23:3e:
1a:dc:c9:bd:ed:86:a3:63:58:c6:90:14:0e:29:b2:44:58:87:
fd:91:9f:6b:8d:53:4a:8e:b1:8c:eb:ef:0f:03:7d:a7:f1:f9:
6f:28:b1:06:c4:ea:79:ab:1b:38:23:51:fe:05:75:0a:19:47:
8b:e8:f1:07:1f:46:09:32:de:5e:08:73:74:43:b6:01:e6:3b:
d0:d9:be:dd:07:ad:2b:37:81:07:5f:57:82:51:69:d3:2e:86:
77:18:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:43 2025 by rpki-client