Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: xAwUMur4GUKxCEHew/BDryoY15y4yvzYMi308tKKycI=
Subject key identifier: 08:BB:30:8A:97:D1:69:AC:C2:AF:82:80:09:71:DF:B0:87:CD:5F:8E
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 01974A7AA735C80DF3BB5DBF412CD184B29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0CD7
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: /MfZMfYh5VetOATawbSKTDI/UM/wmhZDSYGm6hJIWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a7:35:c8:0d:f3:bb:5d:bf:41:2c:d1:84:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=08bb308a97d169acc2af82800971dfb087cd5f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:89:43:b8:a0:df:aa:8f:29:4c:56:a4:0f:
c2:5d:50:93:e1:22:86:ff:3e:90:c5:d6:a6:a2:dc:
0a:3e:d1:73:e2:47:db:c1:d8:e9:67:9e:ff:7e:1c:
b9:a3:d2:31:b9:9a:93:2f:f9:89:74:ed:24:4d:89:
89:7e:62:19:93:83:d8:d7:5e:fe:e9:a2:ff:0c:63:
c9:da:2f:e8:83:11:12:30:b6:b4:8b:b6:4e:16:11:
3d:3e:9c:7b:2a:fe:f9:a7:b0:f5:f6:84:cc:1d:5d:
6a:2b:85:fd:7a:3d:5e:a2:80:67:08:d5:3e:7e:c2:
90:06:57:00:1f:54:66:3e:91:2d:ba:6c:37:cf:40:
d1:46:6e:95:9c:ea:28:2d:66:d8:85:63:70:c5:5b:
fb:5a:49:b2:1c:2b:0a:ee:9d:8e:8e:f1:f4:46:1a:
ca:ab:b5:1b:ae:67:2d:2a:72:e9:f1:d3:e9:e1:14:
38:8d:14:31:43:a6:9d:5f:23:6d:15:5e:86:56:7d:
26:2c:fa:3c:d7:a2:cd:ab:b6:29:dd:7c:3b:3d:8f:
c8:76:d0:2a:19:a6:71:f3:8c:3d:6f:f4:de:e9:0c:
22:ff:75:1f:12:7b:b9:bf:d6:23:94:93:a4:cc:a1:
b1:08:86:95:40:fb:96:6c:d7:9c:a6:2a:83:8f:a3:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BB:30:8A:97:D1:69:AC:C2:AF:82:80:09:71:DF:B0:87:CD:5F:8E
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5b:f6:f7:d2:77:0c:09:c0:40:62:58:a1:4b:4d:60:ae:fb:
67:c6:06:e0:06:4e:a3:be:ad:b9:f1:e8:a2:68:3a:6c:ba:0f:
74:55:f7:4c:90:7a:cf:65:6c:96:31:f5:6c:eb:3e:82:12:24:
53:e6:f9:19:f5:15:cc:dd:07:18:bf:d0:5e:51:13:bd:61:8d:
aa:2e:1b:70:8e:5d:05:4b:99:36:13:54:cf:60:40:e0:76:df:
cf:c0:0f:a8:76:0b:a8:45:0e:9f:08:3b:4a:e4:e6:a4:8e:2d:
be:88:93:b9:3b:13:fc:92:10:7d:97:4c:b9:a7:d8:3f:57:be:
1d:05:a0:cd:68:e6:2b:06:d4:b5:66:4d:30:bf:8a:7a:81:fd:
86:ae:ad:3a:00:60:bd:4c:ee:07:ae:a0:21:52:64:47:a7:2f:
e1:8b:b1:91:99:2a:58:d5:f3:cd:a0:33:aa:9f:f3:16:83:6f:
16:0a:cc:11:57:9f:23:4a:4a:30:09:05:dd:fa:cc:c3:9d:5a:
56:c1:02:b5:b1:c1:ff:e6:10:dc:25:c1:0e:e9:df:ef:77:95:
f5:7d:54:e1:ef:2b:d3:eb:ed:c2:f9:37:91:36:89:76:52:ec:
04:c5:e4:ab:41:48:ae:ff:b0:31:44:58:ed:b7:44:7e:dc:db:
ab:d5:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:54 2025 by rpki-client