Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: 4JcSTdB+0wPp/77zsdjFQT0VLSa1opRQPdb88XElBt0=
Subject key identifier: 91:57:CD:67:2F:AF:9F:B8:E4:5D:D8:84:C0:47:63:06:A7:6D:07:FA
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 0199FBEB21BEB0CBFAB44F498E0D2E78B433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0DF4
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: JO0IZNoHHo6FEzeS83JSxAflhlw739u4LELtnZE0AFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:21:be:b0:cb:fa:b4:4f:49:8e:0d:2e:78:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=9157cd672faf9fb8e45dd884c0476306a76d07fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:c4:41:27:17:e4:9c:c0:c3:4c:33:67:64:
6b:b3:00:a3:31:45:c2:05:5d:86:02:1b:c9:03:5c:
e1:40:ce:e9:4e:4c:33:f6:a1:3a:b9:9a:dc:2c:0a:
36:65:82:2c:fe:20:d3:d0:35:3a:ab:e1:71:d2:93:
df:59:05:fa:e8:6e:5e:76:85:75:4e:5e:32:4a:c7:
30:58:23:67:2a:c4:b4:9e:b4:f1:70:1e:b3:91:08:
a0:99:c0:92:11:9e:3a:38:7e:8f:35:56:36:b3:13:
34:e7:ff:25:9e:9b:40:9a:81:c8:24:90:ab:61:df:
b3:21:49:48:6d:4f:29:02:18:97:7c:d0:ea:5b:e6:
fe:c9:32:d0:e0:70:0a:09:12:79:25:2b:3b:24:39:
50:50:83:ce:45:b6:ee:f5:f5:f2:67:da:85:2f:cf:
f2:c9:bf:92:70:14:5c:25:40:c8:d1:f8:5e:3c:3e:
a8:e9:b8:0b:e7:36:5a:24:6e:f0:0f:37:a4:ef:fb:
1b:37:4c:a5:cd:4e:fd:19:f6:6c:e0:0b:bc:0c:5d:
7e:fa:02:a9:48:dd:c6:a2:ed:12:67:3b:7b:f3:36:
60:e0:2f:36:29:2f:fc:39:99:3d:8b:2f:d2:dc:48:
43:af:ca:f6:76:e7:f1:de:fe:74:0e:b7:04:6a:a6:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:57:CD:67:2F:AF:9F:B8:E4:5D:D8:84:C0:47:63:06:A7:6D:07:FA
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:74:89:31:7c:5d:26:22:51:11:7e:23:fb:45:e2:a1:dd:
b8:35:c4:3b:2f:85:34:8a:0f:9c:77:25:fb:b0:70:8d:38:96:
d7:d2:07:a9:6d:74:45:a3:fc:69:57:0e:3d:27:a2:b8:cb:bb:
b9:7b:77:3f:81:6f:d6:df:eb:0d:5c:82:02:3f:38:74:d1:d5:
1a:67:65:85:4a:84:04:9c:14:7f:07:9c:7b:e7:9a:b8:94:05:
de:6e:18:8d:3d:39:4e:f9:19:86:dd:74:ab:b0:8d:7f:48:da:
3d:c6:68:cd:0f:b2:49:98:18:2a:db:66:9b:3c:17:41:f5:c8:
4b:b0:39:4b:7b:a2:4d:26:2a:15:52:ed:b8:a4:06:87:0d:49:
b4:5e:03:ea:08:cf:87:92:70:df:1d:0f:48:59:50:78:fa:b1:
29:ae:c4:3b:93:0d:7b:3c:70:17:4f:1c:ee:76:7f:60:3c:98:
a5:53:38:e4:c2:2c:fc:d7:c2:7e:e2:3b:f2:03:d8:74:96:ec:
8f:3b:8b:84:ca:49:79:8f:4c:9c:c2:df:87:2e:ae:43:5c:57:
ab:32:16:c9:58:cd:a3:45:f5:a6:05:dd:46:3b:33:72:ee:4a:
0c:18:84:aa:d6:8d:fc:5c:7f:c3:65:68:5f:83:09:8a:f6:45:
ff:c3:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:19 2025 by rpki-client