Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: Rt4OPHHQib5DNyRA6dpSvrG48RFZET8yVIMRxv10jnE=
Subject key identifier: 0A:8D:D5:24:4F:1C:23:E5:A6:D8:0D:DA:E1:76:27:00:C7:D0:25:6D
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 01974A7AA5F364B86DB484388138DC5B6247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: Mde7aQ0EyseZO+XFsH4UXZyHDsidsmzDncdAO9uBqCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a5:f3:64:b8:6d:b4:84:38:81:38:dc:5b:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=0a8dd5244f1c23e5a6d80ddae1762700c7d0256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:b6:7b:9c:1d:ab:fe:72:19:44:86:91:72:
1e:6c:a6:78:00:6f:f4:d4:c1:96:3e:4e:29:13:82:
c0:97:e2:5a:95:7e:56:ac:04:65:92:29:3f:34:b5:
06:07:b2:09:01:90:d4:9f:c8:0f:b2:83:9f:b8:46:
14:de:e0:03:bb:96:63:31:11:25:41:18:da:e3:1e:
92:75:51:5a:99:c6:d9:7f:12:07:04:f0:65:87:91:
4a:ba:c3:c0:49:b8:21:9e:10:20:03:26:f8:9f:c7:
8f:b2:aa:2c:3e:4c:57:b8:41:f9:21:6c:62:7b:6f:
bb:cb:b9:60:ba:f1:89:b5:2c:47:07:6d:09:6b:06:
1d:00:f7:be:8b:c5:9f:d9:6b:a7:97:0b:84:22:2a:
24:e7:44:6d:45:1e:22:d3:5f:48:82:c7:03:76:ca:
81:d6:a3:d2:fe:b0:33:37:7c:cc:cf:f8:37:34:cc:
50:7e:70:49:57:e4:9e:f4:0d:3e:56:df:77:ef:08:
b3:15:69:82:f4:78:49:55:b9:9b:03:93:59:77:13:
f8:5a:a4:64:d6:bf:22:e4:64:67:32:04:e6:31:91:
c0:a9:f1:f3:36:b1:59:26:33:a3:19:ed:e5:2e:c8:
d5:38:b6:a5:f6:02:56:9f:9c:a5:69:37:1f:1e:41:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:D5:24:4F:1C:23:E5:A6:D8:0D:DA:E1:76:27:00:C7:D0:25:6D
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:64:90:27:72:a2:3d:e2:d2:c2:04:0c:13:8e:11:20:8d:aa:
70:88:b6:3b:17:25:0d:da:fc:ee:5e:59:8f:eb:f8:2f:dc:39:
fa:e3:40:67:01:4a:f4:67:cf:32:91:d7:85:23:37:09:eb:6b:
50:4f:a7:37:4a:99:3c:b8:93:98:52:77:c1:ae:c8:0a:70:05:
fb:fb:a0:c7:f3:a9:a5:b2:6a:27:3c:59:7f:49:10:d8:29:38:
f1:44:4c:f4:84:58:12:fa:6c:c8:90:aa:92:04:3c:40:bc:1a:
5d:50:98:45:97:c2:a1:80:e9:11:aa:32:91:d4:3c:71:2e:b2:
1d:8d:92:90:73:1c:e5:31:26:ef:98:e4:9c:5c:9a:46:a4:80:
bd:44:1f:67:33:54:f2:7b:2e:45:f4:07:d6:7b:8c:22:d9:69:
62:d1:d6:19:fd:57:07:a9:2d:f5:ca:b1:83:7a:76:4c:03:69:
e3:00:f8:c1:7c:f9:c6:14:04:65:5e:04:82:e8:69:40:88:21:
72:ef:6e:71:fe:fd:2e:8a:b2:7b:ed:88:a4:3c:28:15:82:db:
45:7d:9b:66:d5:48:ed:60:e9:d6:fd:7a:8d:8e:64:c0:03:20:
3a:43:70:40:55:75:41:99:62:88:3f:d3:b3:e3:ef:aa:f0:2c:
9e:d3:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:50 2025 by rpki-client