Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: PZF1PngYspFlkgijkqfTo9RkxqtvMybwQ4sSFK5AWzY=
Subject key identifier: 84:65:5F:6E:47:9D:50:37:D1:E2:D8:FB:08:74:F7:B3:2D:C3:C8:44
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 0199FDD8B548BA22E976C2180F755C7CA4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1221
Signing time: Sun 19 Oct 2025 19:01:01 +0000
Manifest this update: Sun 19 Oct 2025 19:01:01 +0000
Manifest next update: Mon 20 Oct 2025 19:01:01 +0000
Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: ErC5dUdGicWUQ6tGiQ85F2f/8Trug6sYV9P2sTAN/eg=)
2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b5:48:ba:22:e9:76:c2:18:0f:75:5c:7c:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Oct 19 19:01:01 2025 GMT
Not After : Oct 20 19:01:01 2025 GMT
Subject: CN=84655f6e479d5037d1e2d8fb0874f7b32dc3c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:d0:ba:af:ba:6f:70:0a:c8:c0:44:dc:f5:
82:50:2e:a1:dd:f8:96:cb:37:d3:48:84:52:89:f8:
8f:f7:d4:2f:b2:4b:4b:d4:32:e9:bf:15:0f:c4:34:
28:b6:19:93:af:08:e8:22:5c:9f:7e:9b:c6:fb:d9:
6b:30:c4:95:2a:f1:a6:1d:22:2f:a9:1c:44:f8:e8:
f0:10:62:8e:23:65:0c:fe:94:f2:bf:13:77:26:12:
60:15:25:2c:48:2b:75:97:0a:e8:89:83:8b:63:1c:
5a:e5:5e:c6:f5:fe:9e:10:9a:1f:76:47:1a:ca:69:
94:c4:3c:03:5d:a2:55:0e:e7:3d:65:03:99:23:51:
74:3d:95:b8:7e:37:3e:e1:9b:9f:6c:db:a9:b3:79:
f5:53:c0:94:8a:2c:ef:cd:45:91:54:cd:39:af:00:
b2:10:9d:47:b3:d4:e7:21:a0:aa:5c:2b:d6:d3:04:
34:aa:ad:d1:ce:f4:3f:4c:ff:34:42:c2:95:27:64:
7a:07:77:92:d4:79:41:7a:c0:90:ac:b3:ef:2f:3c:
4c:cb:92:75:4b:0a:b7:af:f2:c0:d4:3c:26:22:1b:
63:12:32:ce:00:37:d0:bd:d5:6e:65:01:50:b4:35:
b4:2f:cc:31:bc:bf:3d:c5:e0:40:d9:25:75:fe:f8:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:65:5F:6E:47:9D:50:37:D1:E2:D8:FB:08:74:F7:B3:2D:C3:C8:44
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8b:5c:3d:4a:82:8a:1e:58:b6:f0:27:ff:37:30:0b:33:34:
c3:f3:82:1e:0d:15:80:c7:96:ca:12:b9:ed:d8:fd:e5:94:e3:
1b:11:d2:7e:ca:57:01:09:d0:18:a0:0a:3d:2a:b0:58:6a:c6:
41:7c:b1:65:4e:78:fe:6f:35:a3:18:87:3d:7a:37:7d:91:fd:
1a:89:ae:42:fb:0b:a7:70:e6:f5:ee:a0:25:fc:8a:2c:94:1b:
cb:56:2a:6f:58:90:9e:59:ba:f8:e9:35:1b:31:4c:a3:94:78:
ab:cc:57:8b:47:10:7d:ca:3d:80:ad:64:82:62:26:5c:53:44:
7d:b7:d6:95:6a:bb:38:c0:6d:b6:e0:5a:c8:fd:2e:fd:ca:c3:
92:42:c2:40:59:1e:7d:ec:b7:8c:38:47:af:ab:c9:12:45:60:
e1:e0:a9:34:2f:54:9e:e2:ef:e9:d7:b7:ca:2b:e8:8f:f6:09:
ba:73:c0:ee:c9:66:48:df:26:f1:15:8a:f3:63:a8:e0:77:35:
1e:c5:ab:85:ed:33:fb:ce:0e:ec:a4:94:10:c3:b7:c1:5e:43:
3f:58:1b:ba:90:d2:c5:0c:e6:39:45:be:2f:2c:58:d4:9a:b3:
45:74:37:5f:b5:bb:cc:95:ad:1e:8f:a2:4d:41:32:c0:99:b2:
ac:6b:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:54 2025 by rpki-client