Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: 9XzHX+2cjQ0dH9k+MitDaYf7Ls98G4/aEyB6ADAb4Ho=
Subject key identifier: 10:43:3E:98:99:A2:16:BC:E0:E5:87:2B:CF:66:10:DC:68:3F:F1:36
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 0197B6A0989DE958967EA991814D0CBB25A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0E23
Signing time: Sat 28 Jun 2025 13:01:07 +0000
Manifest this update: Sat 28 Jun 2025 13:01:07 +0000
Manifest next update: Sun 29 Jun 2025 13:01:07 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: lb/U/tlCF1FD+UcWrTT/cdllMZxXcw9LKcMUVmmvXM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:98:9d:e9:58:96:7e:a9:91:81:4d:0c:bb:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Jun 28 13:01:07 2025 GMT
Not After : Jun 29 13:01:07 2025 GMT
Subject: CN=10433e9899a216bce0e5872bcf6610dc683ff136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ef:f3:41:3a:e7:22:a7:2b:62:db:b1:28:e3:
60:7f:02:d8:e2:3d:c1:63:ce:29:bb:6c:19:b6:0d:
6d:ba:b7:dd:b2:31:fe:b4:44:93:92:7a:08:53:39:
41:ef:55:02:30:b8:93:7a:0e:2e:d3:5e:bd:67:d6:
bf:6a:45:63:b5:c5:c7:cc:c4:ad:86:6f:d5:e7:97:
0d:b4:c7:8c:33:d0:27:3f:e0:d2:9f:08:4e:94:ab:
e4:7e:13:08:f9:ff:f1:e8:f0:bb:e6:31:4e:fe:d4:
47:8a:de:af:25:e2:ed:43:9c:67:08:ac:71:b7:b9:
a0:eb:f4:9f:b2:6d:e0:18:18:9c:23:a0:0e:9e:73:
74:ec:fb:03:22:9d:0a:c6:31:c3:ad:c4:ac:b2:7f:
6b:52:85:31:83:2b:60:03:3e:b1:0c:29:ee:a8:29:
57:69:1a:0d:d8:71:a4:44:91:59:7b:87:6a:ee:f8:
e3:b8:71:df:83:01:a9:af:34:23:fb:89:2b:39:e8:
10:90:bc:89:35:42:b5:67:69:db:52:08:46:6e:ec:
bc:7b:a6:9f:50:b9:40:04:94:3c:24:21:ef:6f:0a:
bf:5d:69:81:91:0b:00:76:ee:59:dd:2a:de:d3:44:
25:55:dc:63:06:91:da:29:92:7a:fd:e4:1c:e9:98:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:3E:98:99:A2:16:BC:E0:E5:87:2B:CF:66:10:DC:68:3F:F1:36
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:40:3f:cc:ab:10:0b:1c:9e:98:fd:4e:ab:be:c8:67:f5:
69:7a:5e:db:8c:47:c1:6e:f2:4b:2a:af:d4:a1:9a:72:c6:38:
f1:27:43:b2:d2:8e:e3:b7:d1:72:39:27:0c:6f:c6:77:cc:ae:
c4:e4:1a:97:f6:dc:2d:3e:84:bb:9a:2d:cd:a3:04:13:23:d5:
bf:f4:a0:7e:6e:b1:2e:01:92:e3:d7:32:75:0c:85:26:9c:32:
1f:d1:59:08:7e:62:98:6c:9c:8e:68:66:fe:a0:83:17:35:da:
a9:02:ae:c5:4f:80:18:ad:03:a0:a2:64:e2:01:ce:6c:54:1e:
4d:35:44:22:d2:63:ab:b8:58:43:8c:51:4f:c9:bd:a4:32:da:
47:03:29:59:bd:47:01:94:9a:a7:49:f8:a9:72:79:3e:53:9b:
7e:37:df:8a:bd:1b:d8:31:6f:c6:98:8b:bd:99:4b:6a:b3:24:
5b:38:12:20:d3:45:36:72:ee:75:ce:7f:af:7c:3b:3b:b5:e7:
ca:22:99:d5:0b:42:18:93:1f:db:a6:1d:24:24:2d:bd:13:8d:
2d:90:61:18:44:99:5e:20:f8:21:e2:90:c9:a2:0d:4c:a4:df:
08:43:14:5f:b0:a7:d3:bd:6b:74:ed:cd:ea:bf:bd:4b:64:09:
10:31:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:45 2025 by rpki-client