Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: Tz2jOIKuBCI7Ot0E6+OFHuiFRGWCXJ1WF29R+QBDQWE=
Subject key identifier: CB:0A:EA:59:EE:DF:AA:52:7D:C8:0B:8E:31:23:D2:ED:5C:35:DC:48
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 0197D586C84B2753D1FBC873F1B4CDD892D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 15C3
Signing time: Fri 04 Jul 2025 13:01:09 +0000
Manifest this update: Fri 04 Jul 2025 13:01:09 +0000
Manifest next update: Sat 05 Jul 2025 13:01:09 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: mAhTtwD6C8KYOyD/tLGb9MBQgy3UCKXcoh+kg+3PiHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:86:c8:4b:27:53:d1:fb:c8:73:f1:b4:cd:d8:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Jul 4 13:01:09 2025 GMT
Not After : Jul 5 13:01:09 2025 GMT
Subject: CN=cb0aea59eedfaa527dc80b8e3123d2ed5c35dc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:c4:32:3f:39:90:26:24:3b:7d:a7:e5:60:
98:21:40:3d:06:b6:51:19:53:0c:2f:92:e7:a5:28:
68:60:af:55:da:91:86:7a:d2:da:3e:76:08:93:10:
4b:d6:b6:76:2c:b9:48:c5:2a:60:5c:5a:a3:cc:d9:
93:37:56:6e:3a:4d:bf:91:57:a4:92:e6:09:ff:57:
73:e1:6f:bd:87:c4:95:56:9b:eb:e5:c2:bb:26:4a:
89:13:37:ab:cc:c3:2c:d5:76:86:b8:33:b4:b6:c1:
61:19:16:a0:ac:48:ee:d4:e3:a1:e1:bc:03:08:e1:
74:f6:71:78:dc:0d:15:a8:f1:1d:c1:76:24:85:0b:
34:b8:be:9a:50:fc:60:56:34:ce:ba:e1:23:10:5a:
d4:8a:94:5e:db:d9:37:99:5f:37:17:9c:b6:96:5d:
93:96:20:8f:b0:40:ed:e8:22:aa:ad:22:ee:e3:b8:
3c:2c:09:5f:a1:06:11:03:34:53:d7:90:3f:10:96:
51:79:db:fc:43:08:35:f8:61:1e:01:df:b9:17:b2:
ee:f8:3b:25:48:03:1c:4f:48:33:16:64:11:7e:3c:
3c:ef:4d:7e:b3:74:42:f8:60:e9:ea:14:37:48:e3:
0a:71:bf:70:9f:77:e9:98:92:15:3f:6b:04:cb:5e:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:EA:59:EE:DF:AA:52:7D:C8:0B:8E:31:23:D2:ED:5C:35:DC:48
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0b:e0:75:24:0e:a2:f7:76:c2:b1:a5:82:a9:91:29:e3:a8:
8a:88:f0:23:81:48:84:a8:1b:d4:f8:6f:54:19:47:20:3a:cf:
2e:55:95:f4:6f:d2:81:6e:54:7a:94:d2:f9:67:42:23:e2:c4:
7a:e6:95:05:d0:96:28:09:c4:b9:2e:ea:a5:e5:f6:fc:26:05:
85:80:2c:53:79:da:17:d2:a2:0d:50:95:17:ed:48:0f:ce:fd:
c6:3f:ae:5e:b9:b3:81:e1:0a:f1:f7:e1:42:ea:ca:72:28:3b:
7c:16:53:1b:4e:39:92:dd:75:0e:f6:78:84:c0:9d:37:25:74:
d1:84:79:dd:d2:b7:b4:cb:ae:0b:a9:21:aa:6a:b1:55:68:0b:
05:95:80:e6:3d:8b:8c:3c:a0:44:e6:cc:f7:f6:e0:ea:89:63:
ce:4e:be:53:25:62:7f:57:25:e9:04:e9:3c:e2:21:14:ba:b4:
da:8c:60:3d:60:57:e7:c6:49:da:35:f2:d0:88:23:83:c8:bb:
2a:6e:69:99:a9:22:c9:21:68:58:db:00:03:a5:64:3c:6c:1c:
1c:fd:17:64:37:c7:11:5c:f3:ac:4e:78:3c:ee:28:4b:0f:16:
c6:7c:cf:eb:38:cb:9c:22:13:85:6c:3d:8e:a8:77:5d:7a:43:
97:ae:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:42:37 2025 by rpki-client