Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: 3lofDB72fhEyuYDqeJPkDw1QbafAV6AACfqy9JcNybQ=
Subject key identifier: 73:AF:D6:87:CA:3F:1B:1A:48:13:7C:A5:13:ED:5F:32:1E:18:A4:91
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 01984AAF38DBDB7345F6875DDDFBF32503F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 1040
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: AOrpRFSlIDXzr2PNkUycDiIUIgyMuJ3TRry1bfYyODc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:38:db:db:73:45:f6:87:5d:dd:fb:f3:25:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=73afd687ca3f1b1a48137ca513ed5f321e18a491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:da:c9:1a:63:57:ca:44:9a:39:1b:ca:bf:
57:85:71:0d:88:5e:fc:ce:bc:e3:59:68:a8:44:04:
50:13:5b:da:40:76:e1:eb:be:ac:82:f7:83:b9:98:
f1:c4:b5:67:c2:23:31:e6:6b:d7:c9:a3:bc:69:04:
4a:9f:f0:48:1e:b3:ca:4a:7a:d1:24:58:ea:4b:1e:
dc:38:c1:e9:50:bc:0c:0f:6b:1c:ea:a3:b7:be:a5:
16:11:b1:3f:6b:5c:92:ee:e2:0d:b0:90:2d:5e:b5:
37:2f:6e:8a:c1:16:fd:cc:2e:73:f2:8b:c3:23:55:
c7:75:c7:08:27:42:34:8d:3a:84:00:d3:79:ce:b2:
20:6d:06:54:7e:8e:54:87:e4:79:82:e5:89:d6:6c:
4b:9a:b1:9b:6a:39:61:b5:a7:d7:1a:31:90:f4:2f:
e7:37:f9:f0:40:90:e8:e9:a6:53:84:2e:c8:b9:72:
16:e4:dd:12:eb:94:ac:aa:c4:e7:ae:bd:a4:60:eb:
06:28:33:7a:07:1e:bf:78:98:f5:6a:b9:85:88:e8:
6e:a6:5c:d2:48:45:59:c1:64:52:32:41:98:d2:48:
dc:ae:2a:a8:a0:22:14:33:bd:5b:11:7c:52:11:79:
f1:71:a6:dc:7c:96:37:a5:7f:ee:35:f6:24:24:f2:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:D6:87:CA:3F:1B:1A:48:13:7C:A5:13:ED:5F:32:1E:18:A4:91
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:8e:57:9e:1f:65:60:b7:14:6b:95:54:88:3b:ef:42:b6:
96:5e:f8:c1:3a:9f:12:b7:ee:a2:31:86:03:9b:b7:11:bd:b4:
f4:57:85:4f:10:c3:3c:4f:dc:ad:57:48:e7:d3:07:f5:85:1e:
8f:d5:05:08:dd:d9:ce:ad:99:80:be:4f:9b:8d:46:13:e3:93:
50:38:b2:ca:a1:90:95:07:f0:6b:46:46:d0:e9:ca:a8:51:24:
e2:5e:ad:eb:40:84:d7:b5:e3:14:14:4d:7f:f7:8c:2d:28:36:
51:15:9d:82:fe:c4:06:bf:93:35:bc:d4:70:2f:41:77:25:a6:
bc:e6:cc:26:7b:c4:46:ea:63:6e:46:9c:c6:bf:f2:33:5d:67:
24:00:10:e7:fa:f1:ff:9b:53:c0:d5:e2:49:d4:1f:8e:c9:41:
7d:a3:b9:4b:55:1d:08:3f:18:33:43:31:89:1a:08:a9:da:96:
a4:c2:84:ae:7a:fb:5a:7f:a2:61:03:a7:42:60:61:78:80:16:
bc:d2:27:93:a0:30:66:9f:f3:ae:d2:f6:d3:84:e2:46:40:32:
4b:77:39:bc:e0:0c:f9:f6:16:85:cd:58:f2:d9:93:48:07:0b:
06:e3:44:99:2f:6e:39:e4:6e:87:09:85:c8:6a:da:4b:d1:7b:
eb:b3:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:01 2025 by rpki-client