Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: VWGlE42GooU8EQD9UqcghQXaN/DpPQWv1i68ymKzGS4=
Subject key identifier: 68:B0:36:38:20:13:50:EC:B4:BC:12:AA:0E:45:94:1F:94:1E:03:9F
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 019849665B9CF9BB3439B23367F0692E91BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 0E69
Signing time: Sun 27 Jul 2025 01:01:41 +0000
Manifest this update: Sun 27 Jul 2025 01:01:41 +0000
Manifest next update: Mon 28 Jul 2025 01:01:41 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: /RTDAmppFOxgNOz8dnbdCI4Okxp9SK2cyHsqdNLcBlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:5b:9c:f9:bb:34:39:b2:33:67:f0:69:2e:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Jul 27 01:01:41 2025 GMT
Not After : Jul 28 01:01:41 2025 GMT
Subject: CN=68b03638201350ecb4bc12aa0e45941f941e039f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:50:9f:70:80:e1:ca:cc:c4:b6:08:55:6d:
d7:17:20:4a:e4:a1:9f:3f:7f:5f:34:34:b0:71:02:
7c:b5:97:dd:5c:8f:87:f2:76:c7:e4:25:ca:37:c1:
23:4a:d1:2f:53:83:8c:b7:cc:dc:1d:56:38:c6:86:
3d:36:56:e6:1b:e4:49:fa:6b:6a:69:bd:7c:2b:e9:
c3:f2:f9:e9:c7:7b:9a:1b:02:fa:5d:42:6f:a1:e7:
46:03:3f:82:56:02:56:e3:33:20:e5:10:f1:ad:80:
75:be:b3:0d:79:8a:e8:d7:55:2b:28:1e:89:08:7d:
b3:54:66:82:fa:a1:97:be:56:9e:7c:fc:e6:29:72:
78:96:96:24:82:ea:08:63:86:77:5b:c4:44:1d:00:
c3:18:b8:09:90:30:83:db:61:9c:32:f6:b2:c7:68:
21:3e:03:7f:b6:d5:84:83:cf:70:dc:a1:d8:fa:fd:
a4:6f:90:ca:81:94:3d:22:3c:05:43:5b:43:cb:1f:
88:3c:4f:85:3f:41:36:6e:26:dc:50:84:15:41:d3:
b1:53:e5:57:f0:b7:8e:6c:0b:43:57:b1:1a:69:c4:
72:3d:b9:d3:22:e4:13:d7:46:9c:3e:be:19:b7:1a:
60:dc:ff:5b:97:40:d1:ce:bd:f1:9a:d0:f9:52:e3:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:36:38:20:13:50:EC:B4:BC:12:AA:0E:45:94:1F:94:1E:03:9F
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:10:4e:85:c0:70:6a:b3:af:5e:ab:11:a2:14:3b:4e:46:cd:
c5:24:18:27:88:33:82:4f:87:81:09:bc:e6:2a:34:22:b5:bd:
d1:47:66:19:49:87:fe:c8:4a:4c:de:70:99:4e:87:b7:ab:a1:
52:13:60:32:66:ac:c5:55:5b:c5:8b:f5:91:b5:cc:67:f5:9e:
da:1b:b5:78:eb:e8:1e:e5:e4:7b:02:34:0d:99:f0:b3:21:d7:
e4:05:26:32:86:bc:d1:52:1b:ac:9b:f7:a8:fc:35:9d:22:3d:
0d:2b:81:24:2e:46:1e:be:3a:c8:5b:b9:08:af:84:2c:e4:db:
a2:05:48:53:e4:da:4d:7b:72:73:f2:96:b4:62:1e:b0:1e:da:
a9:3d:86:72:96:74:14:11:45:3a:7c:e4:56:a2:32:83:cf:08:
e0:2e:29:d7:a3:07:68:28:84:06:3f:82:d2:bd:ed:c1:19:f7:
40:c6:4e:7f:63:b5:bc:c1:85:82:eb:a6:2f:f6:2d:10:d6:12:
99:c9:65:f6:9f:99:df:40:ce:81:bf:02:b0:9b:4e:af:c2:45:
ea:ba:de:a8:f0:23:6a:36:02:37:4d:7d:d2:1c:17:e5:e1:27:
e7:43:05:f5:19:3d:d4:52:2b:f6:ea:b1:e4:c0:a7:89:cd:57:
40:00:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:43 2025 by rpki-client