Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: LkWTTU9UJhIzTEURB2ueGWLVawYJNr+MMSB8m4rCiZ8=
Subject key identifier: D1:C9:39:A1:64:83:A5:88:DC:00:47:73:E0:A7:E2:24:CB:09:07:17
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 0198D84F25FA4B27EBB9A817C46AE0735CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1189
Signing time: Sat 23 Aug 2025 19:02:02 +0000
Manifest this update: Sat 23 Aug 2025 19:02:02 +0000
Manifest next update: Sun 24 Aug 2025 19:02:02 +0000
Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: rvj+Fke8v5R9uhOPyzVY4MD9Zd9dSoJCghmGZOPtQIw=)
2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:25:fa:4b:27:eb:b9:a8:17:c4:6a:e0:73:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Aug 23 19:02:02 2025 GMT
Not After : Aug 24 19:02:02 2025 GMT
Subject: CN=d1c939a16483a588dc004773e0a7e224cb090717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:7f:64:9a:46:ff:da:29:f2:48:b6:c2:b1:
75:0f:2b:4c:43:d9:15:6e:8c:1c:b8:a1:91:6e:f3:
37:c7:35:31:4b:5b:d6:75:90:b0:5a:b7:94:0e:00:
68:10:cb:8b:3d:3b:6f:1d:4b:e3:3d:e2:f9:3d:0d:
6f:9d:ec:ae:85:76:da:69:49:c3:6f:5a:8e:53:09:
1e:2f:8d:a5:bd:ae:a3:80:53:71:be:ab:7d:f4:2e:
92:8a:11:92:c9:3e:87:da:e2:f4:60:15:59:b7:ec:
b8:f4:57:8e:14:88:8c:89:7f:3b:c0:ad:c4:e7:2a:
d0:d9:02:24:5a:03:04:7d:ce:c8:30:78:6c:c5:bc:
8e:1d:07:98:06:7b:e0:6f:3e:fc:f1:ea:75:57:db:
f6:36:92:c8:31:34:d9:8a:be:24:5f:55:f9:f9:cf:
09:15:8f:2d:fe:a4:c5:c7:95:62:23:dc:83:89:6e:
b7:f9:e8:83:9e:08:55:7f:e6:d6:dc:1a:28:28:6d:
3f:3f:15:77:20:3b:33:cd:19:23:5b:1d:ac:98:73:
54:46:4d:ab:56:2c:8b:28:a7:cf:df:14:19:f5:ae:
f1:a3:68:df:97:d1:41:0d:21:f2:22:fb:87:88:04:
2d:da:1b:41:67:70:fe:81:3e:ca:51:7c:8e:e3:b7:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:39:A1:64:83:A5:88:DC:00:47:73:E0:A7:E2:24:CB:09:07:17
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:49:f5:24:05:68:5d:dc:04:d4:5b:35:a6:43:17:c8:c6:
05:2b:97:27:d4:4d:2e:75:5c:41:d3:1d:27:3f:14:12:0b:35:
d1:fd:d7:dd:d1:f5:ee:e4:1c:df:63:59:c2:f7:29:12:a8:be:
c3:20:58:94:e2:02:70:7e:bf:b4:b6:7b:0e:b5:0b:14:de:9a:
d4:ef:05:08:07:99:0c:81:58:b9:8a:7f:62:f3:bc:af:83:39:
76:67:98:b7:45:81:9f:75:c8:47:8a:98:b2:b9:4d:d4:f0:5f:
7f:63:a7:48:1e:8c:4a:c9:39:ae:0e:f0:fe:77:9d:74:6b:2e:
6a:98:b4:d5:11:92:80:95:6d:ea:08:b0:eb:dc:77:65:7c:91:
e5:9a:78:4a:0c:ab:1c:c5:e8:ee:8d:14:80:bc:6a:86:22:a4:
6c:b3:15:a7:1e:e6:cb:9c:05:f6:4f:58:47:cb:d3:45:bc:12:
ae:87:c7:20:10:0a:1a:bd:ea:aa:cf:59:57:46:16:3e:9a:5d:
ec:4c:e2:60:cc:82:c0:00:d0:1f:40:99:8f:1d:b1:c3:0f:17:
fd:35:d5:32:b2:3e:cd:e0:09:0c:46:f9:c4:47:4b:42:e7:14:
84:6c:9c:ee:24:67:1c:d5:0b:83:30:d4:56:74:38:72:8c:41:
2d:db:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:54 2025 by rpki-client