Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier: aLWXGNiQ+8EM7FT+O6nBNZwhgj8Q1cG0KmDlEU8r8Uc=
Subject key identifier: 3C:EC:C3:E7:21:42:9F:38:1F:1D:E4:AF:72:52:E3:99:A9:88:0D:10
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 01974968722B231470B014BBF21F8C591BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number: 04DB
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: LrYxeP1/tD03nbOxQcFFhs48szUbDsBApLtWSMNWzSU=)
2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:72:2b:23:14:70:b0:14:bb:f2:1f:8c:59:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=3cecc3e721429f381f1de4af7252e399a9880d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:9e:3a:bb:f0:d3:44:09:1b:dc:2f:4f:b6:
65:4b:f2:16:93:db:c7:5d:41:fc:62:a5:2d:25:3f:
51:96:bd:44:5e:67:26:b4:59:ad:82:92:48:b7:d1:
25:8c:4f:13:88:9e:cd:c8:87:89:85:25:ae:23:78:
d5:6e:42:84:d7:1f:72:dd:55:66:54:2b:3e:cf:f4:
c8:15:f9:d2:92:65:bb:fc:b4:54:e9:a5:61:7c:86:
25:e7:f8:df:c3:b5:2a:cd:db:e4:e0:48:ec:18:8f:
fd:ee:8d:73:c2:80:17:c0:da:25:94:14:52:f7:e1:
65:94:00:34:75:a8:94:7a:3d:3d:94:32:53:9d:53:
5c:57:a6:fc:1c:52:88:6c:9b:56:41:32:76:b6:5b:
3a:92:e9:4b:88:b2:a0:b2:1d:c8:ad:98:b1:1f:4e:
5c:a9:22:cf:ac:e5:da:4f:c4:4c:83:03:8e:cd:a0:
b1:3c:f2:73:50:be:bb:22:fd:da:0d:27:0e:f1:f7:
82:e0:4d:54:70:61:01:9a:8b:58:32:9f:ac:cd:15:
0d:1c:ee:b0:e2:9d:d3:04:7e:6c:fc:60:69:1e:65:
d3:aa:c0:87:49:3a:7f:1a:49:7a:3e:b2:cb:5d:cb:
5c:ef:b6:06:c7:fc:1b:66:ab:df:c6:40:d1:fd:29:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:C3:E7:21:42:9F:38:1F:1D:E4:AF:72:52:E3:99:A9:88:0D:10
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:84:e2:c8:d2:42:17:43:f2:e2:74:d7:1c:78:b9:3b:0d:
3a:28:1a:7d:ba:2b:56:1b:9c:c0:01:55:c4:39:14:1c:e0:07:
74:c4:c5:0f:6e:c8:d2:5f:54:fa:66:80:56:3d:1b:8d:5a:76:
6a:10:ec:ac:31:c0:f0:42:84:7a:3a:8d:84:79:b8:39:01:a4:
7f:40:ae:96:38:b1:f3:fb:79:96:33:ab:69:e4:12:57:8a:ab:
ce:b6:b9:73:b2:28:2f:fe:3d:a1:e9:7e:31:c9:b4:8d:57:d8:
11:b5:11:ff:0d:13:81:e1:de:fe:9f:c4:89:6d:bc:bf:52:5f:
b7:9c:86:18:69:53:14:6f:c7:ca:7a:15:5c:30:b1:b8:2d:5f:
66:70:07:33:9c:09:0a:1f:21:22:d7:fd:cb:0e:3f:63:c5:bb:
87:79:d0:dc:b5:5e:d7:68:25:7e:20:d0:5e:14:31:df:6c:43:
f3:ce:12:03:0a:3b:d9:4c:07:19:8f:dc:23:de:b2:73:f3:b7:
f7:96:5c:ed:cd:43:0d:b6:93:4f:c9:ac:09:2a:4f:7e:57:5a:
71:63:88:77:58:75:2c:b0:aa:60:0c:f5:d6:5f:f9:3d:b1:88:
8f:ba:2b:60:ca:66:c4:66:c8:91:46:c5:06:03:8a:b0:06:7b:
27:1f:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:39:06 2025 by rpki-client