Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.mft
File: ONY8X84e8J5L8s_JS7JQn9X_UJw.mft (raw, json)
Hash identifier: eW9c+323vMqCoYLBRrgpwrdMCG+MwQ7TNq5ubnqVvWQ=
Subject key identifier: B3:B3:C4:FD:3B:E6:9A:5C:DF:54:15:09:0F:DA:4F:9F:A8:B5:88:D0
Authority key identifier: 38:D6:3C:5F:CE:1E:F0:9E:4B:F2:CF:C9:4B:B2:50:9F:D5:FF:50:9C
Certificate issuer: /CN=38d63c5fce1ef09e4bf2cfc94bb2509fd5ff509c
Certificate serial: 01984A779FE428267F5026AA79854545F99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONY8X84e8J5L8s_JS7JQn9X_UJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.mft
Manifest number: 0434
Signing time: Sun 27 Jul 2025 06:00:10 +0000
Manifest this update: Sun 27 Jul 2025 06:00:10 +0000
Manifest next update: Mon 28 Jul 2025 06:00:10 +0000
Files and hashes: 1: ONY8X84e8J5L8s_JS7JQn9X_UJw.crl (hash: 05hp6rkEHVZZh4apNLnWT48znzorLL/cV6j2qsAbe+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ONY8X84e8J5L8s_JS7JQn9X_UJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9f:e4:28:26:7f:50:26:aa:79:85:45:45:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d63c5fce1ef09e4bf2cfc94bb2509fd5ff509c
Validity
Not Before: Jul 27 06:00:10 2025 GMT
Not After : Jul 28 06:00:10 2025 GMT
Subject: CN=b3b3c4fd3be69a5cdf5415090fda4f9fa8b588d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:96:56:bf:5d:40:20:3d:fe:c6:ad:47:97:
d9:64:0a:64:b6:a5:ae:29:86:c9:d3:42:d2:03:f4:
06:da:98:43:06:3a:99:01:ab:5e:15:93:98:16:d5:
d0:2b:88:6b:4b:83:39:f4:7c:d8:ad:92:38:23:96:
2b:24:20:b9:33:f1:1c:06:13:d4:05:5f:4c:5c:c9:
2b:fd:e7:2c:2e:44:90:16:a0:47:ae:1c:7b:3a:f8:
41:95:f4:26:f9:42:1f:ae:39:95:09:85:94:18:a0:
1c:23:5b:69:47:d0:60:46:1b:f4:33:c0:1b:a1:5e:
d7:df:6c:a3:cb:16:c4:40:e1:5f:9d:37:bb:d1:c5:
2c:72:79:62:f7:93:91:74:6b:4d:53:60:5e:74:52:
5a:10:75:60:9e:74:2f:00:26:46:e3:ed:72:13:fb:
5b:5a:82:9e:65:05:d5:e0:12:7e:f2:ea:11:96:50:
6c:f8:b5:40:b5:89:c6:a7:fa:e2:39:2d:b1:30:72:
fa:97:19:b3:9c:e9:de:39:5d:1b:1e:90:18:c8:33:
8f:d1:42:bd:08:b1:1b:47:d9:e0:31:f3:8b:c5:90:
5f:ac:fa:be:fc:85:f5:f2:2a:3d:48:5c:ae:f3:24:
7f:a9:bd:33:2e:e2:2e:c1:c2:a9:da:8c:32:d7:79:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:C4:FD:3B:E6:9A:5C:DF:54:15:09:0F:DA:4F:9F:A8:B5:88:D0
X509v3 Authority Key Identifier:
keyid:38:D6:3C:5F:CE:1E:F0:9E:4B:F2:CF:C9:4B:B2:50:9F:D5:FF:50:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONY8X84e8J5L8s_JS7JQn9X_UJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ee3d73-9729-4da4-8bc7-67c442d6a850/1/ONY8X84e8J5L8s_JS7JQn9X_UJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cd:30:0f:68:b3:2b:6a:4d:48:66:59:4d:3d:3e:bf:c2:97:
27:3b:73:74:10:8e:69:52:dd:05:52:c4:e8:bb:78:cf:15:14:
e2:df:29:e1:09:ae:06:43:ab:43:8d:7e:76:d9:d7:0b:b3:b7:
40:91:7f:a2:aa:e2:71:61:33:51:35:56:24:db:db:58:79:a1:
a1:96:37:49:e0:27:08:e9:6a:e9:00:8c:8b:98:6e:36:f5:0d:
9e:95:3c:4f:7c:89:ee:95:aa:41:d1:fa:3a:3b:ad:cf:dc:a9:
6f:1b:ee:c9:ee:c4:83:3a:37:79:ef:4c:52:68:d2:05:f5:d2:
85:43:5f:49:1a:61:c5:b4:5d:22:9e:76:be:49:fe:09:27:28:
0b:81:25:c1:9a:23:55:82:13:c9:78:3d:b8:55:bc:ad:80:9a:
b4:ad:ea:90:89:68:c5:2d:a0:e5:30:f9:33:53:e4:b4:d6:0f:
fe:e1:87:27:5e:a0:56:f8:d5:4f:45:99:b9:4d:eb:a9:82:39:
59:ec:83:c8:00:d1:f1:eb:7b:45:3c:b5:44:f6:b5:1e:6b:38:
49:2e:2f:8a:fa:41:13:5a:8e:f1:a7:a2:41:bb:28:ec:4f:9e:
1c:cf:00:89:8d:12:e4:b3:35:e1:16:8f:b8:9a:14:60:cc:ef:
34:2c:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:16 2025 by rpki-client