Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: uCgPLxuEMsdGSvJn3J/gPq32OX8X4thEzF9AO5tCzDQ=
Subject key identifier: 64:28:7A:BC:7F:84:F5:C8:B8:77:CC:2C:00:7F:6A:C5:D4:37:06:C5
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 0197B6A05ABAB76DE865341AD47701D0567C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0C3C
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: h3pjap+BEP9n2elRT07KbHdlF8verElPz41EYeo9RuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5a:ba:b7:6d:e8:65:34:1a:d4:77:01:d0:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=64287abc7f84f5c8b877cc2c007f6ac5d43706c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:ce:39:4d:78:31:a5:f4:68:5c:5e:75:d4:
2a:3f:30:d4:c7:52:d9:02:3c:b2:d1:96:54:87:7f:
96:0e:de:26:e9:63:a4:7e:13:0f:5a:93:7d:57:0b:
fe:a6:5b:f4:10:0d:4a:d1:bc:f6:a6:49:67:ca:96:
ff:47:92:bd:f9:29:47:98:4a:7b:9a:f8:6f:7a:6e:
ec:05:5e:fa:de:01:07:70:6a:43:24:a3:d8:a4:a9:
a6:28:a7:2b:c8:1b:1b:04:02:c2:02:f5:24:32:3a:
6a:e4:2a:45:ae:5a:9e:d6:71:80:3f:af:81:c8:ea:
0c:e3:d0:1b:95:bc:e8:40:de:9d:f0:7f:6b:f2:60:
c2:5a:c1:b7:f9:d8:11:e3:82:c8:f8:d1:87:27:ce:
f8:10:9d:15:11:b7:73:92:6d:b2:6d:fa:94:4d:f9:
42:07:75:95:21:dc:93:55:9c:41:66:08:e2:5e:01:
54:03:49:ef:d0:d4:68:a6:30:a0:50:74:75:6e:0b:
99:39:ec:a5:89:57:72:4c:af:13:91:a2:45:b1:2a:
59:c5:34:4a:52:c9:a8:4e:2e:88:0d:67:49:06:5d:
ce:07:b1:f8:e2:4e:38:54:39:b9:de:e1:e2:9e:57:
0a:a7:0f:4f:34:89:c9:71:f8:08:41:ad:87:f1:47:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:7A:BC:7F:84:F5:C8:B8:77:CC:2C:00:7F:6A:C5:D4:37:06:C5
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:35:90:42:c2:3f:6d:0f:43:dc:e0:0f:0c:e3:9e:3b:77:78:
c3:4b:c0:35:82:63:25:92:b0:ae:6b:bc:58:64:78:27:9c:0d:
f5:4e:66:62:22:8a:d5:1b:d8:5e:90:a8:50:79:91:f2:91:4d:
e1:61:84:21:3c:2a:38:56:eb:4e:fa:ee:fd:b7:b4:98:57:1e:
c2:bf:66:f9:6f:3c:7b:1e:16:6b:dd:e4:32:00:c2:dd:a5:e1:
5b:ee:e9:2c:b2:f5:16:8f:4b:76:1e:79:54:5d:68:48:14:ef:
c4:d3:68:ca:a2:ae:ba:41:0b:c1:d9:7a:3d:91:e0:96:93:da:
44:e6:55:6e:1d:50:3d:15:1d:25:93:a9:e4:b9:39:e1:cd:23:
5c:c3:0a:b6:23:68:a5:ed:b1:f4:a9:b9:fa:bd:3d:bb:57:e7:
6c:da:88:73:9a:cb:c6:0b:e4:df:c5:99:e9:0c:53:28:9b:5c:
66:3c:5f:43:85:6a:1f:85:9a:5a:85:ee:f2:cd:d1:5e:3d:3f:
a9:e2:3d:8c:14:4a:67:58:7b:76:ef:d3:8e:10:b6:8a:91:58:
f5:03:23:48:ae:37:aa:19:77:0d:8a:e5:3e:d0:4d:ef:1d:61:
d7:31:78:5c:aa:39:aa:d0:29:3f:9f:be:39:c0:83:da:fa:29:
eb:13:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:49 2025 by rpki-client