Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
File: OXsxr3cA59mVkO39nVhKG1A46tc.mft (raw, json)
Hash identifier: D777RPS8urDN+vasa3b6Y+38bwfuh+v3Ng955Ee5N+k=
Subject key identifier: A9:03:38:54:D5:53:BB:46:3E:DE:3A:1F:D2:56:FF:47:2F:F4:C8:7A
Authority key identifier: 39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
Certificate issuer: /CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Certificate serial: 01974B8DACD20EFAECE0ACC3D42A8612D71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
Manifest number: 32
Signing time: Sat 07 Jun 2025 18:01:05 +0000
Manifest this update: Sat 07 Jun 2025 18:01:05 +0000
Manifest next update: Sun 08 Jun 2025 18:01:05 +0000
Files and hashes: 1: OXsxr3cA59mVkO39nVhKG1A46tc.crl (hash: pq4kRSRakDpFjIDyEQK4XXfMjzTZi2BP22QrxBD12Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:ac:d2:0e:fa:ec:e0:ac:c3:d4:2a:86:12:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Validity
Not Before: Jun 7 18:01:05 2025 GMT
Not After : Jun 8 18:01:05 2025 GMT
Subject: CN=a9033854d553bb463ede3a1fd256ff472ff4c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:01:5e:f9:ff:11:9e:46:a0:c7:1f:15:84:
a3:ee:1f:06:b0:b1:1c:0c:be:49:da:96:ec:9d:71:
21:91:b1:f0:b0:4e:ff:4b:db:bc:f6:20:18:14:06:
8f:c9:5e:0d:e4:77:34:20:65:75:52:dc:81:20:e4:
75:1e:7a:9d:50:50:3d:14:17:bc:62:cc:26:ba:05:
d2:6a:87:f5:f7:38:dd:5f:d5:20:f5:91:e8:25:a2:
a6:d2:88:bc:78:8f:eb:4e:19:c0:6a:00:6d:2f:db:
22:e8:d2:16:78:f8:ea:43:82:9d:fb:3a:1f:3f:46:
6d:30:b1:85:e8:51:87:ef:0c:35:dc:f2:15:ba:ba:
9e:81:dc:cc:49:eb:ea:b8:82:f2:9e:72:15:3d:48:
15:16:3f:b8:52:ca:e2:21:fa:6d:55:db:47:2a:f6:
82:68:7f:7b:af:6e:62:84:fc:7e:de:a4:99:85:7e:
e2:07:4e:39:ee:c7:0b:8a:dc:31:0f:af:69:d2:78:
b4:73:73:71:4a:b1:3c:eb:e0:e0:49:65:e8:7d:b2:
0b:11:cc:a2:b0:43:81:a9:6b:37:7f:97:44:12:ce:
63:33:b1:49:f8:e0:c0:cc:37:00:af:29:b5:1b:25:
3d:46:d0:ef:a7:0c:f3:a6:0c:97:ee:76:8d:53:a8:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:38:54:D5:53:BB:46:3E:DE:3A:1F:D2:56:FF:47:2F:F4:C8:7A
X509v3 Authority Key Identifier:
keyid:39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:48:6c:c8:55:2e:23:ca:91:60:9e:65:61:5d:9b:52:35:a3:
d1:6e:ab:f0:92:ce:2a:7c:d5:54:39:9d:64:5f:db:81:01:8d:
52:6e:60:66:80:10:50:71:d5:ab:fa:07:c5:18:8d:07:07:2e:
01:6c:28:bf:84:30:21:85:1e:a6:7c:af:ba:31:33:90:c0:bf:
09:34:a8:5f:09:f4:21:86:d4:c6:61:59:64:0e:6c:ff:f3:b6:
e2:ad:f8:90:be:bb:ff:8e:f0:4b:ae:eb:f7:03:35:96:16:87:
a7:92:93:49:38:7b:1c:52:7e:24:fc:fd:d4:15:74:f8:0d:4f:
df:9a:cf:3b:57:f4:4a:14:2b:e0:1d:db:bf:6d:98:fb:03:3d:
2c:97:5e:af:65:27:0f:be:f3:c4:94:d3:4a:7b:fa:34:35:e4:
e5:b0:58:c9:08:6c:48:93:84:f5:63:da:56:30:5b:2f:c3:0e:
cc:80:10:65:92:51:13:24:26:9f:53:85:cf:27:c2:ef:7b:90:
bd:97:2e:f6:a2:49:8d:e5:5b:45:4a:7d:05:6c:b7:a5:a4:60:
bf:f4:79:5c:6e:cc:e7:66:2c:15:9e:ac:4a:eb:95:08:6f:c9:
ed:7d:19:44:19:83:29:3d:db:02:b7:f2:63:4c:f5:55:ae:d0:
f7:bb:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:52:09 2025 by rpki-client