Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: qckHq6+8xW7d7FzpDj7LHD1woAg/Ifw7SEQ9UTPzKJA=
Subject key identifier: 03:DC:1A:EA:5D:83:08:98:AD:C4:66:8A:26:3A:2B:2F:5D:11:4B:0A
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019749D5DC0152BD176DF8A67F42872625D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0CC8
Signing time: Sat 07 Jun 2025 10:00:41 +0000
Manifest this update: Sat 07 Jun 2025 10:00:41 +0000
Manifest next update: Sun 08 Jun 2025 10:00:41 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: Knux9b/MWeSY1bl++7d71XJMc2HF4lLB4TMZZby2GSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:dc:01:52:bd:17:6d:f8:a6:7f:42:87:26:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jun 7 10:00:41 2025 GMT
Not After : Jun 8 10:00:41 2025 GMT
Subject: CN=03dc1aea5d830898adc4668a263a2b2f5d114b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:9b:9e:9b:f6:2e:1d:b8:d5:f5:fa:53:f0:
7d:55:ed:d7:86:85:34:09:b4:c7:f3:05:df:9c:d7:
b8:f7:5a:14:27:99:2b:49:80:45:d4:be:21:48:18:
26:f7:15:a2:12:3f:62:be:9e:ec:cf:00:98:89:b9:
ef:83:db:44:1f:14:5d:c6:ed:d6:dd:5f:1f:c8:84:
a6:dd:2d:da:00:c1:40:cb:8a:eb:3f:5c:5c:fa:e5:
85:58:15:6e:9d:2d:b3:63:5b:11:1f:6c:4e:d8:89:
47:06:23:a0:23:eb:34:14:59:5d:d2:c8:31:fd:69:
2e:99:0a:97:49:7a:eb:1f:02:4b:4f:f8:30:eb:89:
4c:21:77:62:52:00:48:18:f5:63:48:8d:90:b0:d8:
95:6e:5f:6a:35:1d:16:77:7e:5c:5b:78:80:a6:5d:
00:9e:26:33:d0:18:2a:e0:a0:ef:9a:b5:8e:fc:3c:
78:33:5e:c3:bd:eb:99:9e:f9:9e:d9:b5:d6:92:dc:
18:c6:98:5d:e1:a6:49:70:75:be:23:14:e4:7a:54:
fd:c1:ae:41:da:b4:aa:8b:bc:44:a2:8a:65:4e:51:
36:61:61:17:a3:31:c6:90:9e:a2:5c:f2:7e:f5:d9:
b5:6c:d4:51:10:e6:4e:6a:7e:7e:c1:15:f1:57:43:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:1A:EA:5D:83:08:98:AD:C4:66:8A:26:3A:2B:2F:5D:11:4B:0A
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:5b:d8:94:a6:47:aa:01:08:05:92:38:47:99:81:8f:aa:
1d:6a:73:ce:b6:3b:83:14:ca:3a:77:b4:d2:77:85:43:ee:d8:
13:48:98:b6:3c:6d:59:ca:66:44:e9:31:2f:b6:5c:a1:16:44:
89:77:19:9d:74:27:8d:ec:bc:23:79:a9:48:d6:67:e5:b8:49:
1b:fe:30:ed:84:ff:6e:ff:90:30:8a:f7:88:ef:ba:c2:c4:25:
e3:4c:a4:24:09:75:75:f4:fe:4b:62:ac:12:aa:af:d7:2d:4e:
16:a7:f3:4d:f7:06:01:dd:4a:20:25:6f:2a:ad:01:f9:43:b4:
75:a6:49:22:e6:65:54:d6:2f:64:f7:4d:93:7f:51:23:04:9c:
72:fa:f2:25:c3:db:96:a7:0d:f2:48:01:65:54:38:28:4d:c6:
49:e0:44:56:c2:ed:ef:2e:41:e4:5e:01:13:d9:89:8a:f9:30:
67:10:a8:3e:9f:fd:e9:3c:da:e8:ca:fb:99:da:c0:33:9c:68:
64:72:14:ff:3c:0f:f5:30:bb:cf:9e:f4:39:7a:3a:5b:95:0e:
00:56:46:ac:71:d1:31:fd:f5:97:87:26:b0:c0:bf:e4:92:48:
d7:b6:ba:c1:f7:8e:72:a3:95:9a:ef:8f:e9:66:d0:3b:17:3e:
00:39:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:25 2025 by rpki-client