Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: 4PSJape99uZf/zh7K6HbuJIZrnD406Km21YiOrBCeCU=
Subject key identifier: D7:E8:49:2A:4D:33:56:74:D4:79:F0:B8:75:BA:1D:8B:73:60:8B:75
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 01974C691CD8803FABB108AA573A3B753B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 22:00:46 +0000
Manifest this update: Sat 07 Jun 2025 22:00:46 +0000
Manifest next update: Sun 08 Jun 2025 22:00:46 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: zSxEJWc/JVrixhi0ek9H8YGrnJAVX6T81FrOhNAVpBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:1c:d8:80:3f:ab:b1:08:aa:57:3a:3b:75:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Jun 7 22:00:46 2025 GMT
Not After : Jun 8 22:00:46 2025 GMT
Subject: CN=d7e8492a4d335674d479f0b875ba1d8b73608b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:3d:cf:17:0e:31:c4:65:af:70:fa:c1:ee:
2d:cf:ad:b4:97:d8:b4:b3:ca:14:ce:e3:06:f0:e3:
c7:a6:ab:e6:e9:7f:05:a7:17:b2:fa:56:01:e3:b4:
97:08:4d:f4:81:65:6c:17:e2:bd:c9:11:59:0f:81:
e5:b0:e6:9d:bf:99:0a:3c:8d:ac:31:33:2d:5b:1b:
56:7d:70:70:b7:fb:d9:c0:b9:e5:5a:8b:65:fe:bc:
90:72:0c:11:ab:a2:bd:f5:0a:89:f3:3d:09:13:29:
4b:4a:8a:09:2e:42:16:31:32:91:e5:49:8b:02:7d:
0c:1f:0a:00:59:72:13:8c:58:c6:5a:ad:54:cf:4d:
20:c7:fb:56:56:ed:ad:70:1f:81:d9:50:60:e7:d0:
ed:b3:bf:e9:c9:8f:1a:05:be:6b:27:db:1f:64:94:
a0:d6:60:2d:52:03:58:9b:d6:9c:04:df:68:bf:ef:
52:b3:a3:81:d8:89:20:7a:83:8f:11:d9:f0:ea:49:
1b:0c:ff:df:26:7e:d9:3d:93:e4:63:59:79:85:05:
81:75:df:b8:64:64:e7:b9:ec:4f:99:3c:42:6a:82:
85:96:2e:ca:3a:2b:d6:dd:cd:9d:21:d8:0d:77:29:
59:d8:eb:b3:8a:6c:41:9b:f6:ec:cd:8b:3e:dc:b0:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:49:2A:4D:33:56:74:D4:79:F0:B8:75:BA:1D:8B:73:60:8B:75
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:62:cf:9e:0c:60:eb:7d:80:ed:f7:de:e5:f5:36:c9:ab:
f6:c4:42:42:16:63:a3:e2:eb:41:64:92:3d:0b:00:04:a6:35:
51:7a:68:d2:75:bb:48:22:80:21:32:99:31:fc:97:27:0e:15:
8b:ec:02:46:74:36:35:fe:27:54:45:89:8e:72:e7:a6:78:aa:
19:22:3d:39:a5:ec:a3:46:7d:89:a8:ae:02:73:b2:78:ca:0a:
7c:78:ac:3e:5f:9c:cf:2e:3f:62:1f:5a:15:8d:89:3a:74:4f:
36:a2:0a:56:4c:ca:5c:b8:2e:94:a8:e7:61:93:37:fe:3a:cf:
ea:6e:cd:6b:da:a0:61:0e:d6:2f:d7:f8:df:12:66:4a:7e:ce:
d8:84:de:38:b1:e2:9e:49:6b:40:93:dd:02:70:11:0c:7b:d0:
5c:d3:07:a1:3c:b5:b8:23:dd:73:28:6f:09:d3:3e:a7:87:ae:
72:46:72:18:15:66:3e:b5:df:fc:76:47:9a:0d:64:fa:86:2e:
c4:0e:35:68:6c:26:96:fb:03:d1:01:87:88:ed:95:8f:dd:bd:
dd:f3:e2:a8:d5:72:be:45:fa:78:b0:53:e1:a7:57:43:5b:3e:
43:dc:d1:b9:72:7b:ea:cd:14:09:30:90:f0:c4:df:d1:76:d4:
1e:77:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:28 2025 by rpki-client