Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: nF6gyGe4Fej3u1bx9DJJ6D54uYGcvyUw3+/oEh2bPUc=
Subject key identifier: 3C:E0:FA:98:E6:82:B9:31:24:F4:A6:93:B6:A1:9B:DD:A1:B4:AF:CA
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 0198D6610A0E3FAC84C848B3ED7631BC4306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: Gh9ae5jfvbRPCjMZ+pp6CugSJwvaANa7RzX0ElHkSds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0a:0e:3f:ac:84:c8:48:b3:ed:76:31:bc:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=3ce0fa98e682b93124f4a693b6a19bdda1b4afca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:ad:77:98:f5:68:30:75:2b:c6:72:8e:d1:
ee:fb:1c:6c:47:9e:a3:b6:7d:6f:32:43:1e:d3:97:
bb:89:cf:e9:f5:c8:ef:8b:97:30:61:42:f0:19:f9:
28:f0:01:96:32:8a:fb:31:65:a4:31:ee:ee:36:25:
4a:eb:50:d6:3e:09:f3:6b:9f:c5:ad:26:a4:03:1e:
75:6f:7e:29:20:c5:91:d0:2c:66:35:1c:7c:ff:14:
87:c9:1c:2b:53:bf:09:f4:30:41:e1:c1:51:51:97:
00:99:8a:bc:44:eb:bb:98:ec:4b:4d:d0:ca:3b:c0:
6c:e5:98:db:c1:6c:8e:b5:14:28:67:c6:d2:26:bb:
1e:de:28:f8:41:37:37:c5:90:49:86:80:4a:4b:ad:
00:99:5d:80:6a:40:58:58:05:3b:19:e7:09:da:c0:
80:71:88:ff:75:3d:cf:9b:c2:88:0a:db:5a:56:07:
f4:a7:61:d5:95:44:d6:af:eb:8d:e8:2c:78:a0:8a:
67:31:e9:d6:05:0f:ed:f3:9f:d1:c3:9d:50:47:35:
3f:5f:ff:cb:e8:b9:f7:34:23:1c:2b:c5:b6:a8:30:
59:64:83:72:50:7e:db:da:9c:97:dc:11:c4:58:fb:
60:71:f0:f2:0b:df:59:d7:e9:67:55:a8:c7:9f:30:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:FA:98:E6:82:B9:31:24:F4:A6:93:B6:A1:9B:DD:A1:B4:AF:CA
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:f4:0b:26:b9:9e:8d:eb:9c:be:5a:19:a0:75:36:41:83:
ff:a8:2b:a5:55:b2:b7:3c:3f:52:5a:0d:06:1c:ed:24:47:af:
ed:78:84:a3:4b:b2:9f:ce:2c:8c:39:4c:35:51:9d:6f:3e:a3:
a8:f0:17:15:4c:5f:06:0d:4c:f5:8e:cf:98:75:6f:d3:b1:f7:
84:7b:a7:ac:84:5f:cc:d4:73:7a:82:3d:fb:83:f7:64:a0:60:
22:24:7c:b5:f9:b0:64:64:e3:a6:c8:54:c5:e9:a1:2e:60:32:
7e:3a:c7:86:b4:d8:c9:8d:32:94:f0:a4:82:65:4b:b9:05:64:
49:60:16:66:c3:f9:8e:36:4f:23:6a:e4:49:c8:fd:ed:19:6c:
87:e4:16:3b:ae:22:17:da:37:3c:ee:23:85:e0:f7:74:b4:57:
ec:d5:9b:c4:33:a0:90:37:d3:26:17:05:5b:ab:26:fc:0b:4c:
eb:5c:7e:98:4a:c0:05:b9:e2:b9:70:25:f3:f9:82:db:42:62:
a7:6b:c6:23:cb:6d:59:98:5c:8e:91:bb:90:29:a6:7f:c7:16:
30:c5:b2:47:58:44:08:4c:bd:ee:2d:33:6f:02:fa:8d:8d:e1:
9b:cc:c6:dd:05:ca:fd:52:7c:27:b2:08:12:b7:35:0e:49:7d:
70:05:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:15 2025 by rpki-client