Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: V4Ar6mILHY75d1tF6wL7CMLoI8nh5RR8wzGdOpoqzns=
Subject key identifier: EB:2F:12:E1:8D:C9:9F:BE:FD:18:04:F3:FC:A0:F8:E1:B7:CD:33:48
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0197B8FCD69377E081AB270A0DF7E3FAB0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 00:01:07 +0000
Manifest this update: Sun 29 Jun 2025 00:01:07 +0000
Manifest next update: Mon 30 Jun 2025 00:01:07 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: K8VoFYuMQlN1ZmcO7sjl0sq9xBuK00yXtNboqH4Jbzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d6:93:77:e0:81:ab:27:0a:0d:f7:e3:fa:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Jun 29 00:01:07 2025 GMT
Not After : Jun 30 00:01:07 2025 GMT
Subject: CN=eb2f12e18dc99fbefd1804f3fca0f8e1b7cd3348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:c9:1c:37:86:98:68:14:81:d5:a1:8b:ad:
43:a1:0f:2a:8f:30:85:a2:8c:29:7e:ca:19:e7:89:
04:37:2b:cb:aa:9f:75:d1:37:65:1a:03:13:68:94:
c3:83:d9:5b:bb:81:cf:44:40:0b:00:e9:3a:00:9d:
ae:09:b8:9c:ec:9e:a0:d4:28:67:6a:58:f7:15:4a:
4d:2b:4c:3b:fa:2d:e7:5c:f3:7b:f1:c3:8e:85:cc:
4b:7f:e1:1d:c8:e3:c8:42:e3:8b:e4:fd:05:a6:77:
e3:34:2f:ba:76:52:8b:41:03:43:05:ba:b4:5f:a6:
92:92:9c:99:ba:51:5d:5d:3e:8f:0d:37:82:55:0c:
23:65:75:62:40:13:48:8a:ed:ff:39:0a:8d:b8:27:
e9:4a:ec:3e:78:e0:90:72:ea:95:3d:f6:7d:f1:57:
e4:28:d9:f1:46:99:92:cb:4f:aa:0b:ce:de:c4:3d:
f6:02:fc:0e:d2:1b:64:8e:82:99:ca:8e:73:14:49:
b5:a5:82:c9:21:ae:d7:de:41:1d:cb:75:a2:5f:13:
cb:a5:65:b8:3b:70:e2:43:0c:f7:8f:f7:7a:e4:38:
a9:8d:b1:f2:a6:7d:a2:be:b6:a5:f6:3f:e5:5b:27:
5e:92:b3:2a:13:52:a0:fc:ea:ea:5a:c7:b5:8f:22:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:12:E1:8D:C9:9F:BE:FD:18:04:F3:FC:A0:F8:E1:B7:CD:33:48
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:48:d0:c9:22:82:6d:28:17:b5:18:44:23:7a:7b:8c:30:
d1:f6:6e:0c:b5:63:12:33:bd:eb:d8:ea:a8:0b:15:a2:7f:fa:
9f:bf:30:a8:bd:46:38:ce:78:f8:15:41:01:de:73:86:59:48:
b6:53:2b:87:18:cb:da:14:27:2a:3d:e2:65:52:31:36:9f:fe:
42:a2:98:bb:83:1e:9c:9d:30:ed:d3:5c:5d:73:8c:ce:f2:c2:
5b:f8:2c:82:e2:22:cd:47:9f:e9:65:00:c7:e0:68:66:53:53:
39:d3:36:c5:be:55:6d:db:8f:f6:83:33:36:43:74:04:c3:f4:
9e:c9:90:d0:c8:04:54:be:c7:e7:5b:f3:81:a7:79:28:f6:f7:
09:ee:b2:22:db:cb:3b:96:11:c9:41:5f:47:a6:81:26:c5:9b:
99:ff:f3:ec:08:2e:ac:b5:e8:0d:8d:b9:6e:1b:1f:47:a3:04:
e6:8a:dc:9a:34:0f:a3:0a:55:69:df:39:2d:f2:5a:86:26:d2:
1b:0f:f6:a8:33:24:3f:3d:f1:0c:54:fa:15:b8:44:d6:a8:8e:
f7:d1:35:f4:5b:5d:3e:d3:ce:01:28:57:83:96:6e:77:2d:54:
10:a2:60:89:e4:f7:fa:f8:1c:6f:7e:d2:90:40:81:04:92:91:
c7:cd:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:13 2025 by rpki-client