Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: BMrrEfdElLgwZ5Qu3e1jVNj4v9M4A0MTB9HUE2xMdjY=
Subject key identifier: 29:8A:0A:EB:B1:13:80:90:1E:68:03:64:F5:26:22:BD:55:44:8F:BB
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 0198D4A7CB1BAC9A47D95346E95275773280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0358
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: wPnTlJajvdbh0t7LmGHw9ZtrGsuqqhj+rhlOGNRLp+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cb:1b:ac:9a:47:d9:53:46:e9:52:75:77:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=298a0aebb11380901e680364f52622bd55448fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:e4:10:b9:a0:08:37:d0:45:a4:dc:81:6e:
bc:29:68:f0:65:c2:27:47:49:f7:bd:de:52:23:14:
67:90:12:0a:c5:3f:da:b1:a9:01:01:94:03:4e:02:
f7:be:b9:7c:58:d0:bf:b5:f2:cb:40:69:a2:f0:ea:
da:be:a9:c4:f7:c0:58:52:e7:54:55:40:2a:c3:7a:
f3:fb:25:40:e1:81:3d:e3:5a:d6:ee:97:74:19:c6:
57:49:95:a4:9c:2b:24:61:6b:f0:c8:31:d8:f5:50:
17:43:f0:4d:f5:f8:99:84:b4:99:7c:b4:87:eb:a7:
9f:aa:19:42:cd:b9:ff:ee:f3:bc:4f:8b:9b:75:a1:
2a:1c:85:40:ec:57:64:68:fa:e2:ee:d3:c1:cf:ae:
da:32:2c:87:a1:47:08:2a:1b:45:89:89:08:03:17:
63:61:32:0f:94:c7:7e:b3:0b:c5:aa:09:44:72:7c:
fc:f9:f9:44:80:7d:e1:6f:8d:dd:5c:a9:18:31:2f:
15:91:2b:95:4a:ab:03:43:d5:0e:52:94:0c:cc:b4:
ab:bf:cf:e1:cd:bd:6d:95:fb:c1:6e:0d:70:46:0f:
c1:45:22:65:b0:45:11:f8:f9:52:f3:1f:92:3b:e6:
cc:7d:1c:05:99:df:cc:ad:34:09:95:d8:8e:53:aa:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:0A:EB:B1:13:80:90:1E:68:03:64:F5:26:22:BD:55:44:8F:BB
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:57:f8:39:99:3a:fe:cb:79:94:59:1b:0d:2c:42:c0:50:
7c:30:fe:58:02:6f:b9:4a:ce:d1:a8:d5:1a:bd:b2:c2:c9:a6:
ad:29:bf:db:e1:ba:e8:a6:a2:a1:94:1c:b8:ec:89:56:2a:be:
ec:07:85:56:a2:37:83:43:da:59:14:22:64:bc:b5:6f:af:85:
2f:16:3d:fa:dd:de:71:fa:81:29:5c:04:39:b0:c4:2f:38:a7:
67:d2:fa:98:5c:d0:96:a4:16:37:c2:b1:9a:9d:1f:97:71:1a:
33:20:1a:ed:ca:a7:40:d1:d0:4b:0c:4a:a3:cb:5f:56:30:46:
a3:69:7d:a3:68:0d:b6:74:0e:e7:d0:4d:b5:8e:1d:91:ad:65:
b9:0c:d6:bb:bc:3b:5d:55:1d:bd:b0:c7:2f:3c:19:2d:e8:17:
d9:08:3d:a4:53:a8:35:14:2d:67:5f:d3:3c:2a:10:b4:65:fb:
86:ed:71:c1:15:21:0e:b4:5a:dd:ac:b7:cc:4c:d8:86:72:15:
23:30:6b:e0:ad:8f:33:7b:69:b6:1f:81:bf:cb:db:b0:15:b0:
42:22:11:44:86:fd:f7:d8:80:1a:35:47:d3:a9:89:6a:fb:f3:
e1:dd:96:ea:aa:d0:fa:59:a6:5d:02:c3:d5:d9:9e:13:bf:fa:
21:83:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:40 2025 by rpki-client