Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: n8JLbZYAuhkzDoFMCyuBHXUdmU7s6VBD19h83JjMYRU=
Subject key identifier: D5:19:21:96:72:C6:7B:F4:7C:35:70:0A:F6:24:03:01:06:E4:AE:A8
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0197499F61E79F9D836B2A6879275AF37BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 09:01:11 +0000
Manifest this update: Sat 07 Jun 2025 09:01:11 +0000
Manifest next update: Sun 08 Jun 2025 09:01:11 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: 1POvjkX/FBApjTvP2JR3Np8OWeoIjsf3gEvV540xVO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:61:e7:9f:9d:83:6b:2a:68:79:27:5a:f3:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Jun 7 09:01:11 2025 GMT
Not After : Jun 8 09:01:11 2025 GMT
Subject: CN=d519219672c67bf47c35700af624030106e4aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:30:0c:53:45:ec:05:6d:ab:61:60:12:9f:
e5:42:6d:fa:f1:82:68:81:3a:7c:3e:04:17:32:14:
14:97:82:18:6e:52:92:65:f2:1c:ca:28:1e:b6:50:
f5:65:7c:4e:21:52:b0:37:81:9b:94:fa:3c:78:7b:
ad:7d:8a:26:ad:d5:40:72:db:8d:8b:80:2a:66:92:
43:87:c1:2d:d7:aa:fb:b5:5c:cb:3d:d9:dd:58:e2:
3c:89:2e:74:69:35:db:ae:3a:34:76:14:41:c8:a8:
e9:64:53:ac:62:ce:1c:73:b0:89:27:af:3e:9d:24:
a8:0e:6c:f1:1e:b5:9d:1d:e1:be:d7:0d:17:0d:8e:
15:78:26:2f:15:1a:1d:45:81:38:e4:56:29:8e:06:
ee:58:8d:d9:68:b3:09:96:bd:ee:4a:ca:b1:da:7f:
98:2c:b4:c0:38:7c:92:4e:d8:cf:fd:c2:5c:7e:17:
56:19:5a:d1:b5:f9:f1:03:69:74:e7:b8:c2:36:e7:
1b:f7:f0:f6:43:51:4e:7d:5b:0d:3a:c6:95:c8:b8:
e6:dc:30:1a:1c:01:71:ca:96:31:39:06:ab:ee:d5:
a2:3c:fb:f1:b6:04:6e:48:0f:37:f7:34:e9:be:32:
e8:c6:a9:c8:57:e0:41:e8:fc:51:40:fb:44:ca:bf:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:21:96:72:C6:7B:F4:7C:35:70:0A:F6:24:03:01:06:E4:AE:A8
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:b1:89:ea:29:9e:4a:dc:53:a2:ef:fa:9a:93:4b:89:ca:
44:35:fa:06:1c:f4:a4:fc:26:6f:76:f4:8d:d0:7f:4e:5e:43:
37:39:bd:75:d4:1e:c7:9b:87:67:fd:0e:9c:01:09:1e:1c:a5:
a6:91:ac:fe:71:5e:ee:35:32:d4:0e:35:80:69:97:76:b0:02:
b4:1b:62:d1:ca:ea:7a:7c:bb:b3:a5:b4:f5:b6:59:e9:a8:d8:
d9:4c:86:75:68:d7:5d:60:9e:15:8e:2a:aa:cc:4b:58:80:ba:
18:d7:92:20:00:bc:c2:c7:5c:8f:28:42:f7:cd:1c:1d:a2:46:
7f:19:9a:d7:10:8f:84:5c:9f:48:40:69:f2:ee:ad:92:3a:24:
79:3b:72:3b:e1:95:6f:f9:ac:18:fe:d1:2b:22:80:c5:5a:14:
53:81:82:e2:4a:91:1c:dc:ed:21:ca:5d:fd:c5:e1:63:37:2d:
a7:17:eb:f1:b5:0d:15:15:ec:21:22:49:64:21:b4:de:da:d6:
40:2e:8f:48:d5:ef:16:5f:e3:a1:27:55:e6:3c:30:45:10:8d:
fa:71:b5:f7:39:4c:b2:d5:82:ce:6d:5c:79:de:dd:3f:50:9f:
f4:05:fb:bc:f0:e4:af:c6:f5:dd:4a:97:cb:d8:ba:e1:0b:ab:
e5:96:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:19 2025 by rpki-client