Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: oSVr9lJqljsibziX6iTUUtHq9YaFXxqGcHSpF8As0Nc=
Subject key identifier: 4F:5F:4A:9F:DC:C0:14:44:AD:94:D0:81:B3:8B:6E:02:CE:1F:C8:ED
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 01975E6F5C0C6F19ADBA110F06FE8C3D354E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0CC0
Signing time: Wed 11 Jun 2025 10:00:45 +0000
Manifest this update: Wed 11 Jun 2025 10:00:45 +0000
Manifest next update: Thu 12 Jun 2025 10:00:45 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: jfxPqjn8KZbUeKopA//aJQPLjR4wtHdral0FiTcWGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:5c:0c:6f:19:ad:ba:11:0f:06:fe:8c:3d:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Jun 11 10:00:45 2025 GMT
Not After : Jun 12 10:00:45 2025 GMT
Subject: CN=4f5f4a9fdcc01444ad94d081b38b6e02ce1fc8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:e6:63:72:9e:9d:a7:9a:32:42:f8:b3:e4:
32:c6:3f:05:8c:05:a8:8a:44:7c:13:b6:59:5f:c1:
62:0d:00:46:8b:d4:1a:12:b5:8d:b7:15:98:fa:44:
10:ef:28:39:1d:04:1f:20:76:25:5d:80:29:12:fa:
db:af:f0:a9:28:fd:9f:3c:53:c2:69:bb:1c:75:41:
cf:e6:a9:8d:f2:ce:d7:f3:92:18:ae:b9:29:98:7a:
fe:ae:3f:b0:63:ef:0f:a3:0e:fc:90:a1:af:20:8d:
1e:a5:92:91:ea:80:4d:c5:1d:d7:c2:f0:3c:d0:48:
9c:d1:94:c4:fd:40:38:22:98:86:64:74:34:a8:e1:
d2:5d:4c:37:95:0e:cf:47:18:6b:91:ce:de:5b:03:
43:e0:1a:38:04:2e:35:cd:84:79:e2:63:eb:dd:f0:
f2:02:12:ec:2a:49:48:76:fd:2a:2a:22:36:d0:c7:
55:f0:c8:fb:b4:38:20:0e:a9:9c:40:61:35:16:91:
97:ae:4c:95:db:db:b6:d3:0b:73:29:f3:52:d4:46:
26:01:06:58:4d:0e:5e:1d:a9:8c:95:48:cf:fe:4e:
83:ad:bd:03:71:1b:08:5f:8b:d9:99:2e:28:5d:dd:
b7:54:07:3a:57:8d:55:53:fc:0f:77:df:ae:b4:5d:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:4A:9F:DC:C0:14:44:AD:94:D0:81:B3:8B:6E:02:CE:1F:C8:ED
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0b:2b:5c:f0:0f:15:69:bf:96:03:22:ac:e2:9e:bd:2d:03:
09:06:8a:21:c9:03:a0:15:75:b4:b2:d3:5e:dc:83:37:c7:00:
9a:9d:71:fa:b0:26:fe:3f:55:84:dc:47:15:c6:91:ad:f8:55:
fb:ce:9d:c0:22:6d:f5:31:c0:6c:2b:3e:61:36:85:9d:d3:7b:
45:54:99:29:b9:3f:0c:b0:2b:ea:ea:cd:99:46:51:2b:df:62:
c7:94:2d:f2:4d:a7:2f:a6:33:31:4b:8f:94:7a:c5:c1:38:22:
e1:82:65:09:54:03:cc:05:9f:49:54:75:65:6b:90:25:bb:bb:
e3:4c:95:a1:dc:7f:42:93:4d:73:b2:d0:5e:ae:90:29:af:17:
0c:7b:73:f7:ca:b9:d4:0d:9b:fb:cd:05:a8:99:db:c9:f8:18:
97:aa:44:a3:74:14:46:63:b6:42:fa:be:9e:55:a0:5b:11:2c:
2b:6b:87:21:1c:77:ad:ba:8a:e9:9f:bb:97:7e:21:ea:dd:ba:
08:ce:7d:be:75:38:fd:34:9b:55:d9:b7:1e:59:2b:6e:ce:c1:
cd:39:22:9d:d4:c5:d6:08:f5:21:50:9c:59:7e:29:f8:b0:b7:
5a:93:01:e6:5a:84:af:0b:37:11:4f:30:c7:af:b2:4d:14:96:
93:7d:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:39:26 2025 by rpki-client