Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: 9oIYLtVyX1ii9cr8C9sP483nIfk0a+XTL3jN+7J/NDI=
Subject key identifier: 97:35:D1:8A:59:47:F6:B4:91:B1:FD:E3:99:9B:53:20:72:96:A3:0C
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 019748FA0297A1F8350F96F3D4B83A2B751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0BF5
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: GOr5khRhcEhbAL8kOWRxqfz1qBSG9gBXfED0Y47paNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:02:97:a1:f8:35:0f:96:f3:d4:b8:3a:2b:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=9735d18a5947f6b491b1fde3999b53207296a30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:7b:45:bc:29:72:21:f6:a6:1d:9b:33:41:
07:64:0d:1b:3f:9f:77:db:af:77:9c:ca:e2:f7:5d:
af:5b:b4:43:62:c2:40:5c:f2:2c:0a:ba:37:09:1b:
43:10:55:e1:fa:25:4a:af:f4:b5:bb:89:30:b9:67:
a7:18:4b:12:a3:aa:7f:6a:d9:d5:6d:92:21:04:26:
50:94:ee:f3:a4:2a:a5:55:bb:3b:6b:d4:08:f1:3d:
fe:60:4d:ea:4b:8c:ee:1e:83:15:64:71:16:c1:e5:
d3:46:f6:a0:51:8e:a7:e8:3a:f4:95:7f:6d:9a:1a:
ac:ad:5d:22:ee:02:1f:a0:f5:8d:b0:ed:8b:e4:d8:
0a:fd:d8:63:a4:73:ab:3c:09:d8:d7:51:92:79:46:
06:77:8e:de:6d:95:2f:84:a9:37:f1:30:ba:44:04:
34:9c:22:95:8b:1d:4d:ee:d1:59:9e:0a:80:65:8f:
bc:2b:f3:b9:66:db:5e:08:8d:01:bf:21:ba:2e:9b:
4c:89:7f:65:a8:1c:c4:e5:28:5b:2a:58:a6:95:ad:
be:36:71:2a:2c:45:36:e7:1c:51:aa:a7:d6:da:9b:
f9:e7:a0:63:8f:a6:0f:ea:cf:36:28:ef:85:61:24:
d9:d6:02:d1:18:73:e2:1c:1b:14:b4:b6:a9:5b:25:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:D1:8A:59:47:F6:B4:91:B1:FD:E3:99:9B:53:20:72:96:A3:0C
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:d0:0a:4c:83:49:9b:6c:64:90:49:1e:cf:54:28:b3:f3:
89:d0:b8:0c:c4:fc:e3:26:fc:dd:1e:94:7a:16:62:23:1e:cc:
f8:e9:cb:f1:c0:ef:a3:99:9a:41:2b:43:e8:ee:38:c1:59:5d:
d3:bc:3d:1e:fd:fe:b9:82:bb:80:09:fd:e8:28:71:1b:25:f2:
43:38:d9:b6:92:4f:7e:bf:ad:97:88:45:d9:06:6d:07:0b:d4:
52:f6:72:c7:42:a9:16:7c:e3:07:66:c6:43:f4:7c:f2:51:9e:
9a:08:d4:3a:5a:50:ac:59:1b:59:00:e3:d7:ea:2c:7b:cd:be:
e1:af:4c:31:76:d5:c0:37:47:cf:7a:e9:7d:44:05:6e:19:22:
43:3a:5c:fc:5a:d5:2f:f6:4e:bc:27:d6:fc:3a:0f:28:d1:2c:
ee:9e:ab:9b:ef:8e:c4:2a:16:c0:f7:50:6c:a6:49:eb:8d:37:
9d:2a:0d:6b:64:1c:8e:ea:02:d4:77:2e:08:43:aa:25:0f:f0:
06:cc:f3:a0:b8:5d:79:33:31:d3:42:ac:d7:f0:1b:e8:b1:fa:
07:ef:27:be:a4:ea:f4:60:f3:bc:03:0f:64:13:26:e7:55:8f:
5f:49:a7:37:3a:2c:5a:b9:f2:95:af:d1:e8:5e:1c:a4:74:66:
91:b5:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:09 2025 by rpki-client