Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: 4H38PcWZ+kgNMEcxaCIur9ICeRybk3ClscaXo4dCfIA=
Subject key identifier: 1D:52:58:FA:F0:0A:24:91:BF:98:F5:F6:48:A4:8D:C1:3B:C6:A4:E6
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0197458B52B5DC45EB8BB0FD51ED164620ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 02D1
Signing time: Fri 06 Jun 2025 14:00:47 +0000
Manifest this update: Fri 06 Jun 2025 14:00:47 +0000
Manifest next update: Sat 07 Jun 2025 14:00:47 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: zPdTY6TEd3u2LgerEj1dS3ipqAaGTnB+H6UZ7U09w4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:52:b5:dc:45:eb:8b:b0:fd:51:ed:16:46:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Jun 6 14:00:47 2025 GMT
Not After : Jun 7 14:00:47 2025 GMT
Subject: CN=1d5258faf00a2491bf98f5f648a48dc13bc6a4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:54:7e:a9:37:15:35:06:bc:99:9f:a6:12:
da:b7:c5:93:a3:68:1e:cc:25:c4:02:8c:59:3e:1d:
cb:70:b3:10:1a:50:df:ed:9e:d2:4f:c2:c1:54:1e:
1b:53:ea:df:c9:13:80:55:86:05:4b:e0:0f:04:af:
7d:c1:bd:19:b0:88:63:81:32:eb:26:88:d4:33:34:
40:ad:11:72:d8:e5:5c:27:12:4c:b4:e0:8c:02:75:
d7:0e:b9:5e:6e:dc:3c:0c:2d:13:ef:96:2f:f8:83:
66:33:48:06:44:d5:ea:47:90:13:3f:66:bd:e6:a5:
83:2e:0b:ab:e7:bc:6b:80:05:48:6a:e4:b0:68:a5:
1c:35:29:68:8c:d6:ba:e7:ea:f7:76:93:0e:c0:ed:
41:5f:e5:cb:5d:a5:9e:e8:2e:85:e3:31:72:a8:ed:
8b:d3:9a:73:04:f0:c3:53:83:da:19:5b:4d:e5:a0:
e9:9d:20:e6:d4:6d:32:1f:0a:75:b2:b3:3a:45:8c:
6d:d2:cf:bb:f3:bc:a8:8e:a7:14:e1:a8:17:f3:40:
25:06:3f:0e:1c:0d:63:5e:3f:a8:7e:e0:d7:1e:9b:
5d:b2:de:b5:27:04:f0:df:f7:98:46:d0:74:45:4a:
a7:56:e7:14:15:dc:f7:ff:40:f6:a6:52:8f:ea:7f:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:58:FA:F0:0A:24:91:BF:98:F5:F6:48:A4:8D:C1:3B:C6:A4:E6
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1e:63:9b:ae:d8:05:ac:db:d9:be:81:bb:f3:16:2f:c1:17:
ed:99:da:f4:25:12:2b:88:47:ee:ff:f5:b1:f5:c3:96:64:aa:
63:f3:b4:0b:e5:b4:da:5e:6a:10:ec:a4:53:db:7b:7a:39:c7:
b3:ee:e1:9a:59:77:85:5b:80:33:b1:92:03:0a:84:2c:94:44:
d4:21:f5:d6:47:7b:b4:a8:06:67:1c:c7:dc:b0:c5:99:5b:b0:
2b:4d:85:ad:6b:22:07:99:22:58:21:11:39:75:28:37:1d:c3:
1f:52:38:f1:3b:30:7a:2c:84:09:12:bf:8b:26:da:4f:cf:85:
14:bb:aa:8a:82:9a:71:4a:73:2f:a1:c3:c7:1b:d9:bb:76:4b:
80:d6:7c:ed:7a:f4:09:37:2c:01:60:16:d8:64:b2:0f:bc:89:
e0:42:df:cb:f2:d2:95:26:bd:4b:76:83:05:87:04:60:48:22:
09:da:1c:fe:eb:35:e4:25:01:bd:ed:81:ae:f4:0c:c9:33:ca:
2f:60:da:d6:af:42:eb:fa:06:0c:01:17:6a:72:b9:76:45:cb:
2e:1b:6e:9c:6c:e3:dd:11:ee:09:75:0c:39:43:36:93:85:74:
28:c9:f1:9a:3d:92:15:3c:9e:70:d8:43:8a:25:a3:19:2a:0a:
81:92:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:18 2025 by rpki-client