Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: FIC4QN/aftGQ3mrQjBW64T5jbrwubSBRf0kRQ1/fOHg=
Subject key identifier: FB:2D:EC:EF:B4:D2:8E:7D:18:45:9D:D5:EE:13:77:FA:C3:46:49:24
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 0197B6A1B4CB8449B9B0719F35797B0A3CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: eiL8wF0fjzESPmDYpqsAEOmkHR8zm3RWVbKi9vNY7F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b4:cb:84:49:b9:b0:71:9f:35:79:7b:0a:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=fb2decefb4d28e7d18459dd5ee1377fac3464924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:5b:4f:d7:a7:b4:94:7d:87:ec:24:ee:3e:
1c:60:fa:f9:9d:dd:33:21:56:65:1e:26:23:b0:77:
79:7c:33:0a:d6:20:5c:ca:e8:db:47:55:11:d7:5b:
db:05:d0:3f:c5:72:65:28:ca:5c:2f:e6:72:2a:cd:
31:ca:d1:60:da:0b:93:1f:86:c9:86:dd:fb:17:21:
89:d5:d0:31:78:db:77:06:5c:c5:8e:d6:96:77:77:
b2:7a:35:ea:08:9c:d5:84:8f:c4:0f:7b:84:1b:b2:
4b:69:1c:f8:41:62:1f:45:43:6b:4f:fb:24:ce:c3:
b3:24:9d:9b:7e:d6:96:c6:d0:4c:b0:41:3e:b2:6d:
ec:97:4d:36:bd:cc:72:b7:0d:6a:de:89:87:28:02:
a9:c1:2a:db:49:84:d7:61:be:08:85:42:28:99:95:
9a:31:77:93:63:3a:ef:3c:36:77:d3:4a:6c:e2:2e:
03:41:d2:0f:e1:1a:e1:d1:50:5a:ca:87:9b:4f:40:
fc:34:c3:20:64:10:05:b2:13:23:cb:88:7c:22:63:
e7:a3:cc:0b:97:0c:4a:c7:59:36:2e:af:9e:b5:74:
c1:c2:b1:d6:e9:8d:1c:d9:15:5f:24:49:77:47:ae:
d4:78:56:5c:28:c2:52:42:af:b0:75:d7:8a:43:f7:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:EC:EF:B4:D2:8E:7D:18:45:9D:D5:EE:13:77:FA:C3:46:49:24
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:2f:15:e2:1e:35:9a:d0:4b:d5:7b:77:93:99:c4:d6:6c:
0d:b1:06:3c:2a:f5:28:99:b5:36:83:8e:39:a1:e7:d8:b1:db:
99:45:4c:92:0b:8d:35:d9:4d:d6:a3:7d:00:b4:08:b1:5d:ab:
ec:e0:04:1c:60:7e:66:a8:b5:25:5f:77:d6:db:c9:03:6f:e8:
a7:0d:cd:bf:5c:da:59:91:2f:53:a0:af:2a:8b:ad:5c:9f:f7:
6d:29:dd:72:7c:6a:32:75:c6:66:a7:ea:f4:d4:8c:04:9f:b6:
fa:c8:49:2c:4d:1e:a7:b0:9e:96:c4:cc:90:af:17:75:df:1a:
94:47:97:65:2a:37:2e:1d:c9:07:8b:14:a9:d0:c9:f1:b1:02:
50:22:1f:e7:9f:89:b9:14:99:8e:43:be:f2:17:a0:2a:e5:f5:
d6:02:56:c2:1d:8a:e3:79:74:c1:c3:05:58:4f:91:2f:f0:0e:
08:06:70:2b:ae:88:d9:c8:10:44:d5:53:3b:37:b0:d8:0c:4d:
34:b5:71:9f:04:84:29:78:ba:4f:91:10:65:4e:92:30:78:0e:
cf:2f:c0:5f:07:77:23:1e:92:a4:89:b8:ca:80:2a:14:8b:a4:
e3:0f:f0:06:39:07:c5:8d:e6:06:5f:55:6a:54:e6:f2:30:f3:
78:0c:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:10 2025 by rpki-client