Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier: dCAgdaRx8i7tDDP9f93518mCuG5049x4KFUsMgFb+PM=
Subject key identifier: 31:30:0F:98:C6:34:62:4E:23:C1:FC:14:B9:CF:31:60:DA:85:AF:53
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial: 01974A7A88B5E876D58B501921FCE628459D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number: 114D
Signing time: Sat 07 Jun 2025 13:00:33 +0000
Manifest this update: Sat 07 Jun 2025 13:00:33 +0000
Manifest next update: Sun 08 Jun 2025 13:00:33 +0000
Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: e4BU869DINeCAv9aHbEERtuOlsoA9bEVe5n3Ezi7RTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:88:b5:e8:76:d5:8b:50:19:21:fc:e6:28:45:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Validity
Not Before: Jun 7 13:00:33 2025 GMT
Not After : Jun 8 13:00:33 2025 GMT
Subject: CN=31300f98c634624e23c1fc14b9cf3160da85af53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:ae:e8:0e:f0:cb:e5:f3:b5:0c:31:99:23:
23:ed:10:27:3e:12:49:18:50:da:87:be:78:55:cd:
b6:66:aa:cd:b1:76:8e:19:26:28:f5:8e:47:6b:3f:
43:95:b1:e8:17:17:63:8d:c3:4e:81:15:d6:5b:c2:
33:6d:ad:24:0c:48:e4:04:23:0c:2a:ce:25:fe:77:
1d:f0:f7:f3:f3:16:5f:fb:df:3c:93:da:02:e5:cb:
0b:82:6c:1d:ff:d9:6c:95:bc:79:8b:70:28:13:de:
34:e8:e6:f6:fc:fb:10:01:a3:a1:85:98:1a:51:3b:
88:22:da:e2:c0:90:37:ec:63:25:a2:44:33:84:25:
11:07:de:f8:97:08:43:f3:87:a0:1c:08:fe:9e:c2:
c1:df:f1:6b:ad:98:e4:04:ef:18:d1:b1:09:35:01:
88:b9:de:9f:09:c9:6d:9d:9a:59:f8:b8:c0:5b:d8:
50:b3:ce:2a:08:9b:0b:ac:42:93:b5:9d:05:03:e0:
47:8c:78:5e:c3:3e:b7:e2:5f:b1:a2:0e:01:5b:c3:
b4:93:7b:2b:64:de:c6:49:30:89:72:0c:8f:ee:58:
ab:75:aa:29:2d:d7:61:fa:8d:50:d9:9f:cf:52:2a:
6c:26:af:3d:90:b1:e8:30:47:68:5c:8b:1a:c2:e5:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:0F:98:C6:34:62:4E:23:C1:FC:14:B9:CF:31:60:DA:85:AF:53
X509v3 Authority Key Identifier:
keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:d9:0b:a4:9d:73:09:95:ff:c4:ff:56:fc:66:c1:08:58:
43:87:e2:6e:28:f5:d2:12:1b:8b:c2:56:aa:32:9d:27:17:fc:
4f:46:3c:ea:c1:90:8f:5f:f1:db:eb:81:04:d4:53:62:ea:0c:
f9:b0:16:7d:2c:16:36:26:e1:b3:d8:6b:50:d3:b5:57:e8:63:
15:f4:70:ab:a7:c5:a2:9c:f3:30:2b:16:5c:85:0d:45:62:bb:
1e:1e:cb:11:90:b5:06:f4:15:93:bf:09:df:96:72:59:c9:f6:
09:9d:a0:73:aa:69:18:69:30:8a:51:d5:ec:16:35:f0:48:a6:
dc:9c:5d:d1:0d:78:6f:06:88:15:5f:d2:2c:66:c1:a0:db:5f:
ad:0a:55:3b:eb:92:86:cf:1e:b4:dc:d2:30:94:c1:b8:d8:1d:
e0:72:85:1d:50:2f:13:7b:f4:6f:b1:d2:8b:ac:bb:2f:ea:6b:
d5:0b:e7:bf:72:b8:f3:75:98:5d:a8:ea:55:52:da:e1:f7:0a:
cf:fe:23:80:9f:43:2e:0a:f7:b3:38:1d:58:ec:10:66:9f:db:
b4:9b:01:42:ef:40:8f:f6:57:4b:7f:8a:cb:c2:db:71:6b:40:
dc:ce:00:2d:cb:84:ca:86:00:f7:20:ed:2f:71:51:f8:a1:33:
8b:af:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:47 2025 by rpki-client