Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: JSHLinWbbmuKNvF2whbFz3oxZknasOI2hVVA/lRyrfg=
Subject key identifier: FC:46:E3:17:D0:E0:13:DC:BA:01:22:9E:44:18:05:C0:CE:01:4D:18
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 0199225565793CAD2EC87DFD976348AE3B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: t0iAy9el9UbrckFic8RvvUCemY1Ki7NG9TppTOs+SRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:65:79:3c:ad:2e:c8:7d:fd:97:63:48:ae:3b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=fc46e317d0e013dcba01229e441805c0ce014d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:ec:5f:35:53:7c:95:36:34:90:3c:d3:ef:
e5:84:3b:03:1d:77:ad:80:2c:64:6f:48:1a:47:25:
6c:e5:ff:e7:86:5b:c7:95:7b:3f:c7:3b:62:99:2b:
e0:e8:8f:0c:f7:82:cc:95:ff:24:43:81:e5:d9:43:
3e:89:34:5e:fc:f1:5c:db:23:30:71:36:83:04:67:
fc:87:24:cd:29:8b:36:99:ee:29:d0:08:e9:33:8f:
3f:a2:15:35:33:44:0c:3d:b5:b1:23:27:1e:0f:74:
65:15:e2:7a:77:b0:a0:cf:0f:53:9e:69:80:d5:db:
22:ab:bb:99:0c:ce:05:c4:46:4d:4e:b0:2f:e8:6b:
b3:18:de:d7:bb:6e:6e:b3:76:a9:62:5c:ee:18:b7:
8f:0b:9b:60:93:93:da:5f:39:51:38:01:57:c8:ce:
9c:3f:21:0b:d4:6c:6b:13:9b:19:7d:c4:05:8f:cb:
06:8d:2e:38:a2:ad:ae:11:57:d1:27:44:a3:ae:db:
2a:e6:e0:d1:18:1c:90:64:46:6d:87:86:be:20:7d:
2f:b5:fe:8a:1a:a1:18:7e:a9:b9:0f:1e:89:99:33:
42:1e:4b:f2:ab:b5:46:20:4b:33:41:99:ee:1f:9a:
36:83:6b:39:ff:15:f8:44:c7:08:2a:b0:3a:78:2b:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:E3:17:D0:E0:13:DC:BA:01:22:9E:44:18:05:C0:CE:01:4D:18
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:1f:28:00:be:01:be:18:ea:4c:3d:53:44:3b:bf:b1:1e:
72:65:e8:d9:40:fb:e6:ff:8d:fd:55:b6:98:3f:4c:74:9d:8a:
07:2a:cb:3a:f4:3e:57:07:73:e0:d4:ea:db:69:2d:67:7c:c2:
92:82:ed:33:48:e2:56:0e:8a:e3:91:48:e6:c1:e4:b9:2b:54:
9c:e2:e5:43:92:57:9d:c9:f3:9c:30:61:2d:6c:2c:13:61:14:
d4:a6:00:bc:80:55:27:08:af:6e:2b:2d:5d:d0:57:bd:90:8b:
7d:64:74:ac:24:9c:17:55:88:fa:ca:64:01:18:f3:da:67:5e:
4c:73:fb:7c:c8:55:d3:ec:25:fa:85:8e:a7:35:58:83:58:11:
3a:ad:ff:be:45:75:66:6f:3f:eb:79:41:1e:5f:c5:1e:ee:85:
8d:d1:28:fc:e6:01:f6:5d:66:a5:d7:5c:3c:71:bf:a2:e3:e9:
4f:17:f4:32:b5:84:29:2d:77:c6:a7:b0:12:99:1b:b4:23:4d:
a2:5e:78:84:85:d7:00:00:57:d2:07:a0:c3:a4:00:3f:4c:41:
9c:84:6f:86:a2:42:1a:c9:9f:c5:d1:ad:db:74:cb:5b:8e:e3:
5a:5f:ed:10:cd:0c:dc:d4:a5:ed:34:da:10:da:cc:ad:8a:0e:
f5:de:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client