Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: JU4UGOFKGGGrs+ydm1y9e/B+lf0JQuK4GHIxYtz8yR0=
Subject key identifier: 0D:82:34:FF:F7:AA:86:81:0A:58:F1:09:39:15:3E:F3:E0:FD:51:26
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 01974A7B2AE6156409D8FE2CDA7A82595A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 10FB
Signing time: Sat 07 Jun 2025 13:01:15 +0000
Manifest this update: Sat 07 Jun 2025 13:01:15 +0000
Manifest next update: Sun 08 Jun 2025 13:01:15 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: Ybm6w967EpX5wyzpNUEVkwRCnjCtsAgIfcpqWEBXk1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:2a:e6:15:64:09:d8:fe:2c:da:7a:82:59:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Jun 7 13:01:15 2025 GMT
Not After : Jun 8 13:01:15 2025 GMT
Subject: CN=0d8234fff7aa86810a58f10939153ef3e0fd5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:de:3b:c1:3b:09:0b:ba:fb:ec:4c:fe:23:
17:c5:49:27:f1:48:1f:b7:f3:60:0f:12:b6:0c:1e:
3b:2d:ff:48:fb:99:d7:a4:05:93:92:51:d6:2d:1a:
49:42:8d:76:e9:50:93:03:af:fb:22:74:88:24:f1:
56:a8:27:f7:32:77:cb:1b:41:69:4e:c8:01:63:e0:
26:48:93:21:0c:3c:a5:9a:dc:16:ec:f3:78:e2:e4:
10:ba:37:4c:81:97:bc:02:73:ca:9c:e8:f5:1a:aa:
07:52:ad:8b:68:ed:53:a5:62:66:9c:2a:42:70:4b:
fa:d1:e2:6a:d2:ea:3d:dc:7f:c5:4c:44:a6:5b:d0:
a5:d2:85:ca:5c:b2:31:62:11:5a:ba:08:0a:98:b1:
61:43:86:a7:4c:c9:89:fb:9f:56:9e:80:78:0a:16:
b1:b0:d1:33:9c:2c:9a:10:21:ef:84:73:5a:6c:8e:
5f:87:fc:51:80:44:ab:1d:f2:75:06:42:32:3e:30:
db:17:93:c7:25:9a:a6:eb:38:30:48:6b:53:2e:98:
c4:e3:00:db:2c:8c:0d:53:dc:ae:29:6a:78:b5:74:
2a:85:2e:ac:57:28:fb:fe:4b:c1:57:2c:54:8c:ca:
6f:76:6b:f4:9a:53:f4:07:fa:cf:5a:58:62:3e:31:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:34:FF:F7:AA:86:81:0A:58:F1:09:39:15:3E:F3:E0:FD:51:26
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e5:f9:3d:93:78:f9:f5:32:63:7a:a4:40:6a:ed:d3:de:ed:
41:cb:11:e5:6c:48:bb:65:43:f3:db:1c:0a:69:5e:2a:c1:16:
47:d4:9b:8e:01:75:90:1f:fe:86:81:dc:53:72:68:4c:9a:11:
d3:d6:f8:9d:79:0d:58:f2:7d:f3:37:f4:41:d5:40:78:03:4e:
6a:3d:4a:5d:14:89:01:f6:3f:c1:f5:aa:27:af:2a:82:e6:b5:
46:61:11:f5:01:e5:39:ff:9f:d7:4d:9b:f6:4b:e0:09:6d:0c:
bd:e8:cb:cd:d7:e3:09:ce:70:f3:cf:ac:c2:9b:d4:8e:3a:31:
64:81:1a:74:3b:1f:5c:c9:ff:01:3d:0b:22:1d:62:2b:37:9e:
81:8a:bc:28:e1:22:7f:8f:13:f7:93:23:41:b2:9c:8e:84:d5:
61:5d:0a:ce:c8:80:b8:ea:7b:85:69:f6:74:2b:ce:9c:0e:43:
df:59:e2:32:bd:9c:99:2a:31:8a:42:8e:c7:13:22:94:6e:7a:
2a:62:d9:ef:a1:02:5d:43:af:4a:71:ce:a7:22:78:76:d0:41:
a8:1e:0c:79:dc:30:1e:37:7d:7a:50:b7:46:ad:f3:59:85:5f:
24:c4:81:41:5e:c2:ce:45:3c:50:ec:5c:57:05:9a:52:d4:79:
db:62:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:29 2025 by rpki-client