Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: AVhuMPXkFW4nJyR4hlhPLqBcPaMKWoaS9GL9YxNKJ48=
Subject key identifier: 3E:2C:6E:A6:FA:04:6A:8B:11:0B:5D:35:95:6C:B9:A0:6F:AF:05:9D
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 0198D472BC909357E61D4ADE20604712868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0FC3
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: Puro7eChKj7kcYJU5KTl+8QEtE/i3JNpSDl6+SFYl0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bc:90:93:57:e6:1d:4a:de:20:60:47:12:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=3e2c6ea6fa046a8b110b5d35956cb9a06faf059d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:28:2d:d2:f1:d5:49:fa:0f:95:74:b8:92:
28:85:b2:de:72:5d:53:c5:41:20:d8:06:3e:92:3c:
ad:e5:cd:56:5b:64:46:a8:f5:c9:d4:1c:8f:1f:4f:
06:2c:8c:29:a9:a8:bf:d1:78:26:2a:78:2e:b5:ec:
cf:b7:e5:3c:7b:5c:6b:f3:a1:72:45:03:1e:60:f8:
31:49:91:86:23:60:46:20:c1:b8:5b:f5:ea:95:70:
d4:86:0b:5d:19:83:99:fa:8b:82:d5:7f:a2:2d:4d:
a4:b4:06:2f:4b:20:0a:77:43:9e:2e:9d:9a:97:d0:
63:30:8b:17:eb:b5:ad:6e:52:fd:63:06:a4:27:8d:
ce:47:d8:ef:59:e4:99:54:ad:60:d3:f2:58:8c:6a:
a4:ad:14:d8:d3:16:46:72:27:d9:a9:ae:5b:1f:46:
ae:9d:81:00:60:39:89:87:32:ac:f4:63:ba:ba:47:
4a:6c:48:5f:3e:8c:90:d4:8c:5c:22:1a:71:f2:25:
46:03:b7:dd:ec:6c:91:ec:cb:36:72:ee:1c:7f:3b:
a4:db:4a:64:db:b3:87:7a:0a:60:4b:f9:7f:22:53:
ce:47:e7:53:04:0e:6c:95:cc:53:8d:5f:47:a6:c4:
4c:6c:54:05:20:e6:02:a7:19:46:c9:00:98:97:85:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:6E:A6:FA:04:6A:8B:11:0B:5D:35:95:6C:B9:A0:6F:AF:05:9D
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:f7:6e:27:99:01:71:5f:65:14:e5:b4:bf:70:8c:92:af:
0f:9c:79:ab:40:4d:05:d1:23:0d:ab:6c:ff:c0:5b:e3:28:30:
f3:35:14:23:82:f4:03:4e:f5:68:e4:e0:45:20:d6:14:04:54:
50:72:8e:87:54:d7:d7:b9:3a:db:26:49:c7:f2:34:11:3e:db:
5a:47:b3:59:b7:57:14:49:a0:c7:9d:fe:d7:43:0f:f1:b4:5c:
a3:c1:cb:7b:6a:5a:46:cc:d7:f8:d4:25:57:b6:c5:e0:f6:17:
f7:aa:95:9b:b6:d6:d9:cd:5e:0a:22:d2:ca:66:cf:ea:bc:3d:
fb:ce:c6:56:72:3b:83:87:6e:49:64:02:b2:64:19:c5:8a:83:
c2:ad:a5:7a:a2:2a:a1:dc:21:ce:67:8e:2f:16:10:be:a3:48:
c9:4a:6d:a6:70:75:e9:d7:a3:03:ff:0f:f3:14:3b:0e:3b:19:
2b:e3:8e:05:3d:ba:77:23:2b:d7:bd:ed:9e:dc:49:33:ed:95:
83:74:d9:24:4f:0d:82:bb:1a:ec:89:9a:2f:51:cd:0f:46:01:
a9:4a:09:45:cd:08:52:dd:ab:db:29:64:ba:cc:85:bc:dc:89:
e3:a6:a0:d8:bd:49:da:71:08:bf:22:bf:0a:11:35:bb:07:0d:
3e:fd:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:48 2025 by rpki-client