Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: XxZ6DE3M3TdOVcZhl0bPrRdY/eXrOedbRAdPlqyQ8MY=
Subject key identifier: D3:E0:C4:CC:29:48:B2:65:C6:2D:7F:4F:20:CE:AA:9C:21:CA:1D:B7
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 01974742C7AEB5E5343CEFC4A5B1F24FBF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 057C
Signing time: Fri 06 Jun 2025 22:00:48 +0000
Manifest this update: Fri 06 Jun 2025 22:00:48 +0000
Manifest next update: Sat 07 Jun 2025 22:00:48 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: ezVPrEqp206QUY+0vY/55Szg7AS28ZsWvD7tYKu2Y4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:c7:ae:b5:e5:34:3c:ef:c4:a5:b1:f2:4f:bf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Jun 6 22:00:48 2025 GMT
Not After : Jun 7 22:00:48 2025 GMT
Subject: CN=d3e0c4cc2948b265c62d7f4f20ceaa9c21ca1db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:57:b5:0b:11:29:9a:bb:1f:2d:46:63:de:
c5:e1:3a:30:f5:9f:05:27:4d:96:8a:8d:3a:2e:f2:
50:1e:55:37:e8:8f:bc:b7:ae:21:88:a9:77:44:32:
38:c3:e3:4c:b9:1e:a7:f2:f5:4a:13:92:5a:09:a1:
3c:ec:cc:bb:15:d5:6f:19:0f:b4:30:13:1a:26:08:
4a:93:a6:95:fb:9e:32:91:6d:bc:1e:45:29:a5:a8:
09:15:af:b9:3b:17:2e:c3:c6:15:20:65:fd:ef:6b:
62:fc:ef:63:66:44:c6:9b:6b:7c:de:8c:b3:67:8b:
74:47:a6:5a:63:1a:84:48:e5:17:cf:d4:bb:36:c8:
f2:7a:a9:e6:ad:81:c4:99:ad:fd:35:40:55:89:0a:
ac:2c:9f:4a:d0:aa:80:5d:57:f0:37:33:91:98:b3:
6d:6e:41:52:b7:0d:e3:61:57:69:49:61:8d:d5:fa:
9b:ef:b8:3e:03:49:d5:8b:e8:6f:35:29:38:a3:60:
3d:80:25:7f:11:a6:6d:12:2e:ec:df:88:2d:05:a2:
52:dc:06:32:68:92:97:18:d4:6b:01:79:75:51:85:
70:a4:86:28:51:9e:e9:d1:30:a1:fc:79:64:7a:34:
35:b7:c0:3b:05:d6:3b:7f:9b:35:5c:23:6e:ea:7c:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:C4:CC:29:48:B2:65:C6:2D:7F:4F:20:CE:AA:9C:21:CA:1D:B7
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:35:44:c2:24:1a:ba:40:ee:8b:65:cb:03:33:69:14:36:
72:67:16:66:88:b3:b5:af:8b:e8:53:21:2c:49:b4:ef:82:66:
b4:70:86:4f:21:d1:ee:e4:1f:3a:14:ea:1d:79:be:b9:0d:6d:
ec:3d:c4:77:8a:12:ed:ec:ce:5d:58:04:00:4c:8b:cf:35:33:
88:f0:b5:c9:6c:bc:14:6b:f4:44:fb:e9:c2:47:d3:fb:f8:af:
fb:53:e8:69:3b:df:79:6e:c8:4d:a8:1e:e8:51:f8:2b:7f:8b:
37:9e:74:99:72:a0:20:d3:d9:10:3f:09:6a:7f:86:7a:0a:9b:
fa:17:77:56:b1:1d:77:10:f5:7b:5e:9f:d1:43:30:d8:72:05:
97:75:80:26:cc:37:29:f6:38:c7:6a:df:1a:8d:a4:00:be:90:
c7:14:2f:53:0f:e0:3c:eb:23:24:8b:53:3c:23:72:64:f7:9f:
e9:81:7b:e8:bd:c3:29:7d:8a:c8:67:dc:c8:ba:99:ad:4c:73:
d9:65:27:41:7c:ff:45:a3:db:38:27:e4:8e:1e:6c:19:db:d2:
ab:b1:b9:8b:9a:0e:9f:a6:58:82:e7:e7:43:ac:42:fc:7a:0a:
eb:85:6f:35:64:cb:c7:c7:e7:3c:bd:49:8d:1b:68:a0:19:ca:
38:15:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:14 2025 by rpki-client