Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: 9NixUFt19wtK/BTiQ5OYrsm8ovZzGLVMVvZe6YUhXoI=
Subject key identifier: 28:D2:31:8A:39:15:0F:53:08:2D:28:24:8E:17:1D:DC:FD:A8:98:5C
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 019754C76D8B1E16020CB7C805688E6C2503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 13:00:45 +0000
Manifest this update: Mon 09 Jun 2025 13:00:45 +0000
Manifest next update: Tue 10 Jun 2025 13:00:45 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: mC4LS7KvpI6E8+rS5QGVvEyQyX9R7XcTipb97nEclwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:6d:8b:1e:16:02:0c:b7:c8:05:68:8e:6c:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Jun 9 13:00:45 2025 GMT
Not After : Jun 10 13:00:45 2025 GMT
Subject: CN=28d2318a39150f53082d28248e171ddcfda8985c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:a4:8e:3e:5c:7b:e9:b5:33:53:a7:4e:de:
ff:e9:c0:36:9a:74:50:ff:33:6e:8e:b5:bd:53:f1:
b1:0d:b8:02:e7:d4:4f:9a:34:6e:a5:f7:cd:08:3a:
51:fb:c8:56:1e:c4:6b:01:3b:0d:50:d1:8a:9d:47:
a7:16:85:09:97:83:7a:25:58:24:fd:db:3d:62:df:
99:c5:79:11:93:3d:de:54:a1:bc:55:5e:3c:1f:91:
42:43:c5:4d:33:43:0d:85:f5:eb:0c:74:d1:a6:29:
50:c1:f8:bc:73:39:1b:43:05:57:c8:18:a3:c5:de:
5c:08:69:a4:42:8d:f8:cd:63:2f:d9:9e:a6:f7:90:
e4:2a:ff:93:28:0d:09:5f:93:61:09:95:51:d8:e9:
ff:a1:69:19:3f:8d:b4:68:c6:90:1d:90:e1:2e:a4:
c1:7c:ce:f5:62:49:24:67:c7:8e:be:64:9e:a3:e4:
87:7b:b3:78:95:b0:68:50:96:d8:bb:40:cc:3d:02:
8d:72:75:5f:29:b9:01:66:42:54:21:f7:c3:be:80:
6f:df:f3:21:43:99:9a:ce:6d:0b:6e:c0:7a:c8:b4:
8a:70:a2:23:d2:70:3a:0f:b1:a6:b0:99:ec:45:e4:
01:2c:7f:71:fd:52:c3:c3:f4:99:6c:cf:1c:35:79:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:31:8A:39:15:0F:53:08:2D:28:24:8E:17:1D:DC:FD:A8:98:5C
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:1f:8c:6c:88:13:2d:c8:65:0e:02:94:93:ca:a8:c8:02:
e4:ec:3e:e7:52:ab:74:0e:e0:2f:65:07:c8:d9:74:56:05:20:
76:57:c5:c7:7c:34:bb:d7:1c:d0:87:bd:e6:1f:43:0d:48:82:
8e:2d:ec:eb:7b:a4:f0:41:ef:29:db:53:e2:18:fa:90:bd:f9:
c7:4f:c0:8b:f4:3b:61:94:e7:e2:17:24:de:e9:b0:c0:8e:76:
6c:4d:e4:f3:07:40:63:7e:03:c9:4a:0d:c0:c1:bb:e3:a4:e5:
c5:36:37:1e:c1:f7:0e:50:2c:fc:24:17:12:8c:b5:1e:30:87:
ba:b8:48:cd:c5:35:c1:9b:dd:74:a1:29:bc:f9:b9:31:b3:f3:
b7:0f:7d:42:57:c8:ca:36:ae:8b:2a:20:6a:72:dc:da:d1:ef:
b4:c9:b8:32:d4:3c:fa:51:14:b3:99:d5:ba:c0:eb:8c:2d:05:
78:38:a6:d6:7e:3a:04:c0:ce:52:0c:95:da:f1:66:42:68:7e:
38:36:05:08:5e:fe:a6:3c:42:7e:7c:53:00:26:fe:e9:82:d8:
59:d9:7b:74:c1:3f:24:f7:d4:c3:6b:1d:7a:42:84:24:2b:4b:
8e:5c:58:29:8d:a2:03:8f:75:db:b4:8d:9b:65:fe:c6:4c:43:
67:0e:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:45:45 2025 by rpki-client