Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier: F3oEqtu09iASRQ+0RcM7V0AWWjc/0MIjB0YHXd1KgDk=
Subject key identifier: 7F:11:BD:05:B9:6A:48:80:FC:CF:9C:97:3C:42:BD:52:47:DE:3C:E2
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer: /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial: 01974D7B9F5416E1726A5D523ECBBAA254CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number: 02D5
Signing time: Sun 08 Jun 2025 03:00:36 +0000
Manifest this update: Sun 08 Jun 2025 03:00:36 +0000
Manifest next update: Mon 09 Jun 2025 03:00:36 +0000
Files and hashes: 1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: QtpBXtzqryOcRfOpQbtblKYui/X5vV1y4WnkSF0NMTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:9f:54:16:e1:72:6a:5d:52:3e:cb:ba:a2:54:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Validity
Not Before: Jun 8 03:00:36 2025 GMT
Not After : Jun 9 03:00:36 2025 GMT
Subject: CN=7f11bd05b96a4880fccf9c973c42bd5247de3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:26:8f:b8:3a:e9:6c:f6:9d:56:2b:d5:72:
6d:64:a7:ba:e7:12:8b:d7:84:9b:c4:86:70:76:6b:
4e:5c:c5:25:2b:1f:90:a3:f9:e0:ab:0e:5f:7c:08:
47:3d:f4:eb:05:ee:59:16:04:fa:62:fe:5a:a4:de:
20:f0:3f:8f:e4:bd:ca:87:ef:06:72:2c:98:dc:75:
dc:e2:73:e0:fa:2c:b2:8f:98:f2:5e:ae:10:59:32:
b9:ef:be:1f:51:e4:52:56:0d:32:d3:21:2f:19:c3:
63:27:7a:23:74:cc:2b:2b:59:b3:58:36:d6:4d:8c:
69:20:fd:47:3b:40:e3:2b:69:fd:d7:8a:a0:54:47:
15:02:61:0d:e8:5c:19:d1:88:32:3d:5c:a0:81:b9:
04:19:30:29:71:72:6b:05:e0:a5:46:02:43:d4:35:
d6:4f:74:f5:00:e9:85:71:ed:f0:2a:c9:3a:88:54:
4b:a2:a1:86:f0:0b:01:4e:fc:30:65:df:19:95:6d:
79:bb:f8:a5:cd:52:25:3c:61:8b:ed:bf:87:66:96:
c8:1e:b3:82:46:43:09:b0:24:2b:20:60:45:db:c7:
69:35:d8:67:e0:dc:0b:17:66:c6:4d:40:26:ab:f3:
15:3e:01:fa:b3:c6:14:8f:55:72:81:c9:42:39:ed:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:BD:05:B9:6A:48:80:FC:CF:9C:97:3C:42:BD:52:47:DE:3C:E2
X509v3 Authority Key Identifier:
keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:8a:71:1f:3b:8d:7a:b7:f0:86:7b:47:04:db:a4:75:42:
f9:2c:73:ab:1f:c0:ea:bf:eb:8b:66:20:39:86:e2:34:96:15:
35:73:f0:2e:7a:59:47:31:ce:95:1c:92:ed:eb:3b:e3:c2:65:
9f:97:5f:0c:f9:ee:f8:f4:12:e9:d8:c3:06:17:27:7c:3b:c3:
e6:aa:ad:0b:63:af:c1:92:ae:e9:5d:4e:9a:57:13:bf:4f:19:
83:62:c1:69:e3:d8:f1:72:9c:f5:67:60:8f:d9:5e:1b:a8:0a:
eb:f5:d9:07:fd:ac:f1:6b:2d:9c:74:b5:f9:44:fd:3f:fb:86:
d9:f8:30:09:6c:2f:d6:4b:39:50:52:51:45:77:71:54:3e:35:
20:72:8e:36:e8:ef:15:08:ae:cf:39:29:9e:9f:f5:b2:45:65:
e3:c4:e5:f1:6d:2a:e7:2c:84:89:c5:23:06:19:e0:9a:7f:0b:
54:54:1c:b1:d5:c7:85:fb:69:bf:51:24:99:93:bd:36:8c:a3:
ab:be:82:90:fc:a2:18:8e:43:62:68:2f:83:3f:c7:2d:72:6f:
8d:cb:80:70:dc:67:da:37:8b:10:6a:1c:56:58:cf:e7:35:d6:
29:6d:84:e2:72:4f:32:27:87:25:66:ae:12:92:4a:83:c6:3e:
ce:20:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:12 2025 by rpki-client