Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: lUtmO6s95kF1QMKiHWOK07+o98jO1WopBrwyzlExhmk=
Subject key identifier: D0:BC:22:A4:A5:E0:A1:16:44:1E:B3:6B:18:16:6C:A9:E5:81:A5:70
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 01974EFC61E2057CB341ED769C89CD1190F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0AA3
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: rz+1LxStY474Sc/fs39LLI1wAEvED2hTqhqUl95xVxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:61:e2:05:7c:b3:41:ed:76:9c:89:cd:11:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=d0bc22a4a5e0a116441eb36b18166ca9e581a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:7c:9f:6f:6d:ed:33:96:3f:62:16:cc:cf:
38:c6:5d:d8:99:8f:2c:19:9f:a2:25:a2:3d:81:29:
ef:02:00:06:f4:dc:71:03:c9:8e:62:d6:f6:1e:02:
8a:2e:37:28:61:7e:45:9d:09:fa:51:5e:df:e7:3e:
3e:08:b2:ed:b1:36:10:44:2d:bb:14:38:cd:89:d8:
04:fd:dd:5c:ce:d6:08:9d:c2:84:04:02:ea:5b:25:
99:aa:1c:10:88:6a:e1:1f:74:28:84:37:0f:72:85:
0d:18:12:76:75:a0:ef:6b:f2:ee:d0:71:53:0e:b0:
78:0a:44:db:0f:ed:ce:36:07:01:1d:3f:75:6a:85:
1f:d7:5c:b0:c2:87:19:8e:5c:c3:4a:18:74:ff:36:
63:1a:2a:18:4c:c4:ca:5f:4b:45:b9:58:83:11:b8:
49:fc:ff:a8:6f:b2:79:b3:a4:50:f8:23:71:90:39:
c1:c4:15:00:8f:58:2a:cc:a6:d2:54:8f:8c:4c:ac:
eb:1b:66:25:49:be:36:d1:37:05:53:29:42:83:4f:
79:36:6f:90:f9:37:b5:72:08:10:cc:1b:72:29:16:
24:0a:60:53:40:6d:15:13:72:34:e0:c5:3b:df:7e:
45:dc:93:82:b4:42:41:f6:2e:1e:27:a1:83:30:2f:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:22:A4:A5:E0:A1:16:44:1E:B3:6B:18:16:6C:A9:E5:81:A5:70
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:a5:6c:52:12:c9:ec:82:ff:a1:78:fe:cd:0f:30:96:6a:
da:ac:1e:18:9a:1e:48:78:e7:c2:1c:23:79:c2:dc:14:46:eb:
fe:bf:13:11:c4:a7:4f:43:ca:3a:03:32:cf:4d:c5:78:15:fc:
7f:62:45:96:56:39:5c:7b:e2:17:b1:a6:55:ad:51:8b:d3:95:
9e:2d:dd:0e:6d:87:5f:ef:9a:cf:05:34:9e:c7:8a:73:78:9b:
43:9e:4b:c6:5c:7c:bf:05:9b:37:18:e7:bf:be:39:af:a3:07:
6f:3c:4e:da:1c:e7:b4:34:f9:d9:f1:5a:a5:33:f6:9d:51:92:
56:4e:dd:e9:f6:51:02:9b:34:12:f1:3f:3f:84:89:a0:e3:d6:
63:1e:99:6d:d9:23:0d:7b:fa:56:c9:93:c6:ce:ee:40:bb:14:
fd:8d:07:49:fe:23:97:46:ac:80:24:35:c7:67:d9:27:3b:33:
96:1b:5b:ec:d9:5f:e6:48:f2:c7:ce:4d:93:a2:b2:e8:bd:07:
cc:a8:82:2f:43:12:b2:3b:40:bd:68:e2:5e:b7:76:0d:f9:d2:
88:90:30:30:f6:64:34:b3:de:7a:60:12:c9:75:39:4e:f0:ae:
07:42:33:9c:13:84:d2:63:e9:58:53:44:9b:08:51:af:24:99:
8c:ed:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:11:21 2025 by rpki-client