Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: UtLjfVgph6JoZCVnXMaqJypJGqL5Fpb+VBNnIjyGjKg=
Subject key identifier: EC:0E:25:D1:63:7E:C9:58:3F:55:8C:73:1A:65:8F:B9:B4:1B:A8:AA
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 01984965D898A542E06DB1DF2931E8B8229E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0E9B
Signing time: Sun 27 Jul 2025 01:01:07 +0000
Manifest this update: Sun 27 Jul 2025 01:01:07 +0000
Manifest next update: Mon 28 Jul 2025 01:01:07 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: HL6xa/llz5IGdUt6lghR0ECAXG/TSKUmUMD3QDkMi4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d8:98:a5:42:e0:6d:b1:df:29:31:e8:b8:22:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Jul 27 01:01:07 2025 GMT
Not After : Jul 28 01:01:07 2025 GMT
Subject: CN=ec0e25d1637ec9583f558c731a658fb9b41ba8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:97:49:4a:31:bb:cc:12:da:af:1c:9b:50:
b0:af:16:7b:4a:49:d3:16:84:3a:21:f7:10:6f:8b:
66:a9:f1:98:28:4c:94:a4:92:4c:55:5a:d4:85:5a:
66:6d:fb:b0:46:a7:c1:f5:23:22:15:bc:df:7e:38:
6e:c3:8f:b8:a0:e0:e5:20:3b:19:f2:68:45:48:40:
a6:3c:1b:d9:bd:ec:b4:dc:c7:ff:c1:40:1e:b0:c5:
b4:6d:5d:65:1c:f4:16:7c:58:57:17:0e:01:61:13:
7e:0b:f8:b2:fe:2e:21:ff:bb:78:98:4e:be:da:86:
3b:6a:d4:8a:ab:44:9a:71:0d:15:f5:0b:66:e2:c6:
45:1f:38:e8:79:00:e7:67:a6:f9:10:1b:ae:0e:99:
1a:98:db:33:e1:1e:d9:b1:77:ba:40:a7:37:8b:53:
7c:65:3e:d7:b9:25:14:b6:cf:2c:b0:ae:5a:45:1f:
b6:7c:b6:25:88:05:31:6a:05:89:4d:b8:cb:54:c1:
39:44:14:55:65:54:80:2f:39:75:30:74:66:39:53:
48:61:b8:ae:9c:ba:ae:fc:89:e2:54:a3:d6:e3:73:
5c:1e:4f:0a:e4:19:60:fe:68:1d:47:3d:f7:5c:19:
22:67:5d:cb:3c:15:4a:0a:dd:67:0e:41:a7:c3:77:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:25:D1:63:7E:C9:58:3F:55:8C:73:1A:65:8F:B9:B4:1B:A8:AA
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:84:3d:66:9c:7a:3e:a8:68:19:27:eb:24:d3:9d:fe:50:
ce:a2:d2:d3:3f:a4:3f:74:78:dc:2f:d6:12:88:ba:20:b9:9e:
cc:ff:d5:b0:e4:df:f6:be:3e:bd:59:04:44:0f:f7:9e:c3:e3:
eb:14:e2:6f:c1:92:79:b6:24:6f:c2:2b:42:01:de:ab:2c:07:
70:76:46:40:51:9e:7f:67:b8:c5:94:a7:16:5c:fa:e0:89:dc:
e3:4b:8a:12:9b:c5:e0:a9:3d:36:68:f2:b9:7f:40:bb:a7:05:
cb:6c:8e:26:a5:8a:41:42:59:5c:49:f1:87:2a:90:5d:86:20:
01:03:28:2d:e6:b1:7f:39:f7:aa:39:fc:a5:a0:36:3d:9e:1d:
b2:1a:ee:85:29:bb:67:ac:d9:e1:58:3d:26:a7:e3:9b:71:5f:
df:8e:b1:76:e0:71:33:de:ea:4c:da:c2:09:14:74:18:44:c1:
70:a9:90:df:ec:f4:d0:a2:4f:8d:d6:1e:07:58:1d:49:97:b2:
8e:cf:f3:58:7b:5c:56:46:6a:9c:4c:b4:62:1f:33:81:08:aa:
db:61:c8:4c:3e:f3:43:a2:40:cd:88:f4:59:63:c6:28:eb:74:
85:9c:3c:22:11:ba:6b:6b:66:f2:20:1e:29:ac:bf:5a:5a:08:
5b:a9:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:43 2025 by rpki-client