Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: xh8gZ9HwKA3mclyS1RJs63HmrXZB/MVNqjpeVbm53bo=
Subject key identifier: 86:86:15:3C:FB:82:39:90:49:87:B3:E6:B8:2A:BF:35:1A:21:E8:9E
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 0197469E44896456401BDFE9A89B900C13FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0EF5
Signing time: Fri 06 Jun 2025 19:01:06 +0000
Manifest this update: Fri 06 Jun 2025 19:01:06 +0000
Manifest next update: Sat 07 Jun 2025 19:01:06 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: RNI1LWCrPv2DqbiH1O9xFXFX2MyZ/n8QBWOV7UTDXMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:44:89:64:56:40:1b:df:e9:a8:9b:90:0c:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Jun 6 19:01:06 2025 GMT
Not After : Jun 7 19:01:06 2025 GMT
Subject: CN=8686153cfb8239904987b3e6b82abf351a21e89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:28:7b:65:95:36:0c:fe:3c:fa:4b:fb:3e:
c9:f5:b2:a9:09:a4:db:37:5b:29:fb:65:7e:39:b5:
42:9f:f9:37:75:e9:98:7a:d4:d9:2c:24:19:6f:65:
e1:c7:79:d3:59:79:8c:37:ae:2e:ee:3a:02:9e:29:
8b:d1:2d:d2:f2:18:02:53:6a:7d:48:56:f1:57:df:
09:3a:80:57:42:96:3e:a7:02:38:d3:e0:5b:e8:9a:
79:d1:e6:30:65:bd:d5:25:24:39:38:af:aa:c4:70:
3b:9f:dd:71:df:46:e1:b7:45:30:38:07:03:dc:63:
1a:53:5f:a2:8c:1b:c3:55:ac:5d:00:1d:82:d2:93:
c9:cc:10:2c:2e:bc:58:04:76:96:fe:bf:35:db:a5:
d1:3d:f4:3c:45:32:5f:ec:2c:28:6c:9e:81:75:a3:
4e:67:7d:3d:e4:2e:83:c2:31:1d:4f:f4:92:8f:98:
1e:a0:f7:fa:0b:d2:8b:8c:9d:45:a9:be:01:a5:d4:
b1:c0:52:ba:ef:41:f8:35:8b:fe:7e:3b:a0:db:56:
b6:b6:a8:de:8d:b6:21:1a:5e:95:d9:a9:ee:62:d2:
3d:42:88:a4:56:93:a8:82:cb:ef:1d:69:bc:cd:b7:
d9:56:f3:f7:db:9b:fa:13:a5:da:9e:3f:d7:5b:46:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:15:3C:FB:82:39:90:49:87:B3:E6:B8:2A:BF:35:1A:21:E8:9E
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:a5:e9:db:89:f4:fb:11:7b:6f:c8:f0:5a:bf:a8:23:b9:
49:3f:99:28:7f:50:f6:6c:3f:6f:d6:f4:e5:64:40:56:96:1f:
91:a4:8a:ac:16:9c:65:94:03:8e:4e:db:1d:40:c5:51:db:64:
0a:a6:03:df:62:c6:d0:d7:a6:7f:89:70:42:59:91:61:e2:92:
3a:dd:db:74:cd:d6:dc:39:72:56:58:29:b7:e0:72:7b:22:a6:
f6:26:90:b2:08:06:93:a6:e4:d0:bb:ac:82:c4:0f:4b:fa:c0:
cd:66:18:63:6e:e3:58:fd:1b:22:61:93:a2:cf:bf:af:00:8e:
50:18:84:0c:5d:01:fa:07:f6:51:8a:c0:32:8e:5c:df:4c:88:
e6:26:59:f2:ca:7b:58:4d:53:3d:0d:3a:e1:87:98:bf:18:e1:
68:22:30:98:fd:83:ae:df:c9:e2:3d:13:92:a1:96:5e:e5:4d:
1c:f3:55:3f:52:20:d1:19:ea:fe:51:c2:23:9c:cd:61:19:74:
be:a2:03:e9:87:0a:51:d1:ea:13:a3:7c:9d:c2:8a:42:df:73:
3e:ee:cb:ef:12:e2:38:f6:c4:8d:d8:42:ca:90:21:70:02:68:
d7:e8:07:a2:73:d2:ff:4c:53:d4:9c:f1:79:b2:30:59:be:3f:
b5:2a:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:14 2025 by rpki-client