
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: 5cYy2rWqkIFQd/lEquHHxGNFrxaPNU75q9oeRzNvdz4=
Subject key identifier: 6B:AC:63:CF:B2:65:70:C0:7E:6C:A3:41:E6:1F:9D:F4:A5:C4:03:12
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 01974AE8AAB58DDCAF2FF7FC652BF093FD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0789
Signing time: Sat 07 Jun 2025 15:00:51 +0000
Manifest this update: Sat 07 Jun 2025 15:00:51 +0000
Manifest next update: Sun 08 Jun 2025 15:00:51 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: eqDoyWVMpl/5DODmP92yB7+kM+v8rHgJ+apZ5Inr3wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:aa:b5:8d:dc:af:2f:f7:fc:65:2b:f0:93:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Jun 7 15:00:51 2025 GMT
Not After : Jun 8 15:00:51 2025 GMT
Subject: CN=6bac63cfb26570c07e6ca341e61f9df4a5c40312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:3f:58:ce:43:df:cb:f2:af:3e:bc:dd:32:
73:6a:f2:50:3f:ad:81:20:8c:74:c5:56:e6:80:8a:
34:64:6e:91:26:09:15:32:12:da:eb:aa:4a:43:e4:
be:4f:16:a5:07:1d:94:83:fc:ec:b1:a2:64:bf:47:
94:5d:9a:98:39:bc:24:70:c3:21:f5:40:11:14:d6:
83:70:b5:d6:85:0f:74:4d:e0:26:4d:ac:0b:cf:5c:
c4:44:e6:c0:84:7a:1e:88:85:1c:99:2e:03:84:e3:
ab:05:a9:3a:90:ac:38:01:ea:fb:0d:21:88:7e:14:
3b:07:7e:64:b0:bd:37:e5:a1:ba:62:0a:03:12:65:
6a:4b:d6:04:33:ba:95:ae:1f:30:1a:cd:c9:45:c0:
6f:07:75:49:c2:0c:9c:cc:a3:4a:42:61:bf:d7:47:
ad:6f:c1:b6:22:d7:29:d9:53:55:43:ca:31:d9:78:
21:d6:d5:39:84:30:ad:54:12:f5:e5:07:79:7d:60:
c5:d2:a3:7e:ce:5e:40:e6:4c:56:d3:43:08:2a:61:
36:ae:f8:c3:31:5a:8b:7e:32:ab:b6:68:5c:0d:9d:
1e:bd:b9:9a:b0:d3:4e:1c:3a:c0:b3:fc:ea:e0:70:
f7:bc:f6:36:49:96:0b:37:1b:2e:a1:a6:96:ac:1e:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:63:CF:B2:65:70:C0:7E:6C:A3:41:E6:1F:9D:F4:A5:C4:03:12
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cd:c4:eb:50:10:eb:28:4b:6e:d6:3f:be:85:90:fd:ea:f0:
f8:7c:62:89:fd:99:8f:73:7d:b9:88:73:ee:fe:9d:1d:d5:7a:
d8:24:59:b0:30:37:41:aa:b4:3d:d4:46:5d:cd:0a:cd:7c:e9:
82:a2:8a:b9:bb:13:89:0f:12:0b:6c:4a:2b:01:d2:fa:05:9a:
58:71:8f:d3:bf:a6:b6:fa:40:58:32:29:14:b6:38:23:8d:90:
8f:d9:85:31:d4:58:00:28:f5:ff:a8:f0:69:e3:0a:1e:e3:99:
95:42:7e:60:ec:11:c4:ae:95:7b:81:94:70:cf:7d:c2:0e:ff:
46:bd:92:2b:a8:d4:71:97:19:41:cc:8a:56:22:01:2e:bc:0e:
32:85:f3:83:ff:87:74:62:4a:2a:4e:b6:44:2c:c2:77:16:71:
b0:cb:81:17:d0:b6:77:cd:8a:9a:bd:37:47:85:89:7e:5f:5c:
a3:25:1f:48:3b:43:48:1c:44:1e:83:d9:ce:88:3f:d7:48:2d:
07:96:59:0a:26:bb:1e:df:94:f1:e2:39:5f:54:58:a2:3b:8e:
cf:a0:7d:03:5e:af:30:7a:65:ae:f0:cb:76:3a:20:1d:39:e3:
8d:22:58:a1:c2:2e:80:52:f3:ae:97:b9:ec:f0:d7:9f:34:c0:
aa:63:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:00:03 2025 by rpki-client