Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: 7+NSFkBPuef/sQ1o47wSo5sjori7yKdW34ZtUszCbXY=
Subject key identifier: 40:FB:28:54:D2:F4:7B:1F:2E:EA:90:9C:8E:AE:9F:F7:9F:8E:D7:0D
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 0197B70E5B949F5E2B725AF32272A707C804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 07C1
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: iD4gx8q+8B+JALoAbhNSQuOSIF//NLVuJPDnibfmG38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5b:94:9f:5e:2b:72:5a:f3:22:72:a7:07:c8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=40fb2854d2f47b1f2eea909c8eae9ff79f8ed70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:5a:fb:3c:06:a5:91:1a:c1:5e:9e:cd:f0:
0e:e6:e7:8d:7c:42:ff:99:eb:a7:5b:75:dc:41:98:
fb:6e:f5:65:9a:67:2b:19:2a:76:55:9b:95:e9:76:
92:08:a8:eb:90:60:20:e0:cf:38:06:80:3c:09:ff:
b4:73:70:14:2a:99:2d:5e:74:e3:1e:92:b8:cd:2b:
d2:0d:fb:40:6c:c7:27:a2:bf:20:9c:21:fc:9c:f6:
24:ed:f2:22:ab:bc:9c:2b:d7:d5:04:f3:f9:cb:0b:
d5:53:d4:d7:41:d9:9b:da:5f:47:7f:ab:ac:d7:de:
08:39:a0:75:e8:21:40:32:df:34:2e:df:89:b9:7e:
20:4a:f1:15:23:9e:e0:7e:44:dd:3e:87:ef:d4:53:
bd:85:7b:e8:ca:fc:64:85:19:c3:be:df:b0:9e:4f:
2c:40:0b:a1:87:8f:06:e6:15:6f:36:2f:26:26:dd:
cc:20:ec:0f:56:7a:1b:b2:9c:c4:d5:b9:a0:d2:0d:
99:6f:e2:6f:57:55:3c:e3:34:2a:06:6d:b3:64:09:
47:3e:4e:f4:fd:e6:9b:24:c6:6f:52:84:ac:a9:fb:
e9:be:29:38:0e:64:de:14:3f:c6:90:76:ad:1e:57:
ff:92:d9:f4:3b:62:e3:9e:fc:e1:66:a3:38:77:4c:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:28:54:D2:F4:7B:1F:2E:EA:90:9C:8E:AE:9F:F7:9F:8E:D7:0D
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:04:84:b5:72:51:9e:58:61:ee:54:cd:7a:3c:cd:05:1a:
6c:ce:29:1d:36:f7:86:87:13:03:bf:20:51:b0:03:e3:2d:1a:
26:32:27:7b:4f:e6:1c:75:9a:dd:8e:27:fd:4a:57:eb:9f:f3:
07:66:50:12:d5:32:89:e9:1b:69:d3:63:b6:dd:fb:a6:71:28:
69:ea:49:96:54:8a:54:33:46:f2:8e:2e:27:dc:53:ec:ff:1a:
ba:c7:90:b6:9e:08:02:d0:95:95:ba:73:8e:1b:e6:1a:b4:39:
8c:47:7a:42:54:be:3d:c1:d8:16:cb:b9:0f:a8:54:c9:b8:33:
24:ee:af:ce:04:12:83:ab:f6:4c:8f:e7:c3:b6:e7:5d:14:77:
18:bf:27:07:17:cb:1d:da:08:ee:23:ad:b9:1e:e5:8f:1f:69:
9d:d5:3f:73:aa:07:a4:62:53:e1:66:86:90:a7:6d:c6:be:f3:
4d:0c:cd:eb:fd:21:d2:c3:97:56:0a:e8:d6:1c:87:23:9f:1d:
45:44:e1:60:b1:61:3a:95:06:29:70:50:b9:6b:45:64:bd:3e:
99:ad:f1:eb:a8:1c:de:5f:5e:f7:77:2d:10:ed:19:df:01:e6:
06:d5:32:34:a9:44:f7:e0:41:9b:c1:f0:6a:ba:21:17:6d:1f:
51:62:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:25 2025 by rpki-client