Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: LnVSF17uVm3oZcZmp2rbLICIrxLqrYO93GXNGpnV+zI=
Subject key identifier: BA:50:67:AD:65:7B:19:A5:93:E5:5D:42:07:5D:DA:7C:62:7E:59:5D
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 01976BF406F8684E7373E6B9661691A440BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 01:00:44 +0000
Manifest this update: Sat 14 Jun 2025 01:00:44 +0000
Manifest next update: Sun 15 Jun 2025 01:00:44 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: Y9muZrlwe5OyenQKuOVz+yjwYrhCiFAy6F5ROk0ai3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:06:f8:68:4e:73:73:e6:b9:66:16:91:a4:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Jun 14 01:00:44 2025 GMT
Not After : Jun 15 01:00:44 2025 GMT
Subject: CN=ba5067ad657b19a593e55d42075dda7c627e595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:10:39:b5:dd:be:e6:e2:7f:0e:47:16:73:
2d:2f:b1:4a:83:14:98:67:d3:95:ce:93:36:09:01:
61:ca:73:87:58:20:ac:4d:52:f7:9a:04:6c:8c:87:
8e:f1:25:d8:59:92:38:be:ff:ea:c4:a7:98:6e:a5:
67:af:35:d4:b5:d1:e9:7c:84:8e:28:87:36:39:66:
49:c1:cc:d0:ee:97:5e:58:74:cb:4c:a8:1d:ea:74:
bf:20:10:99:8f:6c:0d:c9:47:5b:10:3a:01:1e:c3:
7e:a9:31:9a:fa:00:79:c4:2a:57:5b:44:6a:ff:67:
a7:d8:78:7e:2b:06:58:0e:56:0c:51:e8:63:66:35:
f6:7d:58:4d:62:bb:53:1f:e3:49:27:d2:4f:6a:00:
21:53:09:e9:dc:0f:31:be:4c:52:12:0d:7c:37:8a:
41:06:17:dd:48:db:05:0d:6e:db:cf:1a:54:c1:80:
cc:2f:88:73:a8:14:21:0f:33:56:0c:02:af:a4:53:
07:de:01:7e:49:b1:b8:bd:5a:58:72:81:29:ce:e3:
9b:0c:b8:c0:b8:c4:28:0a:45:dd:60:18:53:a0:d1:
1a:f1:66:cd:e8:9b:13:71:5f:ee:c1:9f:c9:e4:9d:
2e:d9:cf:91:5f:34:23:16:4c:15:71:1c:3a:5d:73:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:67:AD:65:7B:19:A5:93:E5:5D:42:07:5D:DA:7C:62:7E:59:5D
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:37:65:61:40:c1:07:48:e4:60:aa:9f:c1:4e:a6:df:57:bd:
57:38:24:d4:d0:54:d5:90:30:24:70:98:67:7a:14:84:26:6b:
27:f0:9d:2f:8e:57:71:a5:74:28:87:23:7d:22:14:47:05:e5:
d5:96:43:c9:5e:85:46:9a:da:75:a0:f3:5d:a7:77:ce:ab:6a:
54:9b:d8:e5:fb:52:96:df:eb:e6:fd:cd:e2:83:78:df:d5:8a:
de:30:5d:5d:04:ae:c9:f4:40:dd:8c:1b:f8:1f:6c:fe:36:44:
a8:62:a7:53:61:df:d7:4c:f9:25:45:b5:9e:3a:77:01:0c:83:
d5:54:9c:50:d9:d4:ab:8a:69:89:2c:13:81:c0:13:23:a6:7c:
75:91:16:63:5c:a1:35:78:41:a0:67:5a:fb:24:a7:d8:ce:8d:
45:34:a9:a3:dd:2e:fb:39:9f:d6:ff:3c:6b:c2:44:d0:71:0c:
2c:2a:cb:c0:49:a1:69:a2:2c:ae:68:d0:59:62:7d:65:e4:ae:
99:33:06:52:24:47:67:50:e2:81:89:da:4b:7e:9e:ed:13:15:
6e:16:03:bb:28:ad:87:55:55:bc:cb:fa:ae:40:6c:95:01:8c:
3b:2f:b7:a2:93:99:ee:bf:b3:72:45:ef:de:79:50:66:0c:d4:
52:80:e5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:45:48 2025 by rpki-client