Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
File: mAO6qFdULHWMJI0xHmOX_OSDgBo.mft (raw, json)
Hash identifier: 6nBZfnC1AcilP5xcsX06sPkqh6kh+28mXPhkMPcaNvU=
Subject key identifier: 9C:75:7D:8D:B3:78:D1:FB:0A:9A:6F:67:75:04:F2:52:34:79:FE:A1
Authority key identifier: 98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
Certificate issuer: /CN=9803baa857542c758c248d311e6397fce483801a
Certificate serial: 0197499F3DC2C2E8F2D57744AF2525BFD039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
Manifest number: 54
Signing time: Sat 07 Jun 2025 09:01:02 +0000
Manifest this update: Sat 07 Jun 2025 09:01:02 +0000
Manifest next update: Sun 08 Jun 2025 09:01:02 +0000
Files and hashes: 1: mAO6qFdULHWMJI0xHmOX_OSDgBo.crl (hash: /yLZ5t9Zp49O3Fy3M0YVx+uH4ALXPturv2SpmFU+WNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3d:c2:c2:e8:f2:d5:77:44:af:25:25:bf:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803baa857542c758c248d311e6397fce483801a
Validity
Not Before: Jun 7 09:01:02 2025 GMT
Not After : Jun 8 09:01:02 2025 GMT
Subject: CN=9c757d8db378d1fb0a9a6f677504f2523479fea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:87:d6:6e:71:a5:a2:36:21:3d:87:83:99:
cb:36:e1:53:c8:92:20:a3:9c:c0:b9:b3:a4:50:11:
c1:fe:fe:dd:7e:d9:8e:38:6c:e3:86:d3:24:ca:da:
04:89:42:41:41:85:94:b3:5b:95:1e:18:7d:cc:d0:
ba:de:4c:ed:82:9f:12:e1:07:0c:63:aa:e9:8a:5f:
b8:a1:a0:80:85:18:bc:1a:f2:4c:0d:b0:53:ad:1b:
3d:45:20:25:55:1f:50:da:b3:c0:29:8c:f9:83:eb:
b8:88:c9:82:bf:5e:55:53:e8:18:d0:04:6b:b3:be:
a2:1d:b5:40:b3:33:f1:a6:f2:02:03:f0:15:d6:f8:
d5:13:03:fe:3e:01:8c:32:ed:f5:94:47:c3:58:ad:
dd:6d:68:a8:22:81:0f:c7:24:db:37:49:c4:6c:0a:
9a:42:96:d4:2a:b5:b2:a6:96:b8:a7:de:b1:88:fa:
7a:ec:eb:e5:23:05:ff:cb:cb:42:7b:d7:21:03:fd:
13:bc:55:79:76:aa:96:c2:45:52:e2:c4:81:b4:04:
b7:17:98:74:d6:73:61:ab:2a:0e:67:c6:04:2d:c6:
2f:09:16:ec:3e:05:6b:b7:22:0b:03:70:a4:c7:d1:
6b:03:9a:59:c8:a6:b3:2c:48:21:87:c3:69:14:05:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:7D:8D:B3:78:D1:FB:0A:9A:6F:67:75:04:F2:52:34:79:FE:A1
X509v3 Authority Key Identifier:
keyid:98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:a8:6f:57:e5:60:66:7e:13:07:4d:ea:31:f3:1f:d3:7a:
cf:c2:ed:42:59:3d:63:12:b6:5f:bd:bc:50:c7:a1:f8:49:1b:
3b:c1:25:d5:14:ad:25:97:8a:e2:63:37:22:bf:d3:61:b8:8b:
49:19:49:80:e2:a1:87:79:ef:5e:ca:6a:95:3d:f2:f2:d2:e0:
2e:99:5d:80:47:8c:1a:c7:f0:79:6c:27:bf:f7:f0:ff:79:70:
95:7b:4f:2b:21:6c:5b:07:07:5c:e6:52:4a:6c:39:fc:df:7d:
c7:8e:bb:d8:0c:4b:d9:10:85:78:78:cf:b7:eb:f6:45:d6:2a:
3d:b1:70:2b:78:c2:b9:3d:88:9e:9a:36:24:41:67:fa:ca:f2:
7a:75:c9:74:4a:5a:6a:57:b8:5e:36:9d:ce:8f:9a:ae:79:e6:
bc:20:f4:80:d5:4e:7f:dd:12:e6:7a:40:4d:b7:a8:c0:fd:fb:
58:35:a9:7d:93:2d:a3:25:0f:b3:5e:13:0f:fe:06:35:49:06:
73:40:b2:1d:3c:1a:c3:32:35:a3:b5:2b:1c:f6:89:88:ec:50:
3b:87:5f:dd:80:ec:87:dc:0d:a9:27:d6:1e:0e:ea:66:41:22:
65:92:89:a9:20:84:13:bf:a3:16:27:e9:73:d0:f7:9d:03:95:
92:24:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:34 2025 by rpki-client