Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: gSsme18cYiQZuEZACyTvme5f/U9xtqsAqpW/BLdmys0=
Subject key identifier: 73:C4:A8:71:54:D0:78:4D:46:99:A3:AA:2B:CD:33:C0:7B:10:54:4E
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 0197B70E98CC97B508AA2212432F82AD6525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: n159ZGhifRPOYY9DB82ky9anpzx8YyApELQpclYXZLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:98:cc:97:b5:08:aa:22:12:43:2f:82:ad:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=73c4a87154d0784d4699a3aa2bcd33c07b10544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:dd:1c:92:93:ce:1b:e3:d5:8a:21:ec:7e:
17:73:15:82:23:ac:40:33:63:8a:42:3c:d4:79:d7:
18:ad:57:30:25:c3:62:ed:1b:f8:7d:08:81:6e:e0:
c4:5f:dc:d2:b0:38:c4:90:9c:d4:5f:34:d0:73:b3:
91:cb:e6:63:ac:7a:e4:c1:19:57:a5:b6:6e:bf:75:
b6:98:30:19:07:7f:d1:ce:d5:8f:7a:0e:c2:02:cb:
dd:63:c1:b8:74:a2:41:5f:51:51:c5:9f:77:43:c5:
b5:88:b2:d6:4c:8f:59:94:04:86:0b:7d:57:53:5e:
10:c4:b5:92:14:95:60:e7:54:8f:0d:3d:51:4f:b7:
5d:53:2c:3a:b6:de:d7:31:e3:0c:ad:0d:cf:90:ff:
08:bc:b0:64:dc:fe:a1:15:dd:d8:25:a5:ce:56:a9:
7d:73:3e:5f:cd:8c:f9:42:f4:bd:f8:02:99:18:bf:
6a:45:32:3a:42:66:98:3d:f9:e0:be:34:0d:9c:de:
21:d4:ab:63:1c:cd:b0:f3:3d:5d:1c:91:05:83:e2:
b4:bb:4d:98:4c:87:ec:fc:9b:41:95:42:17:7d:24:
d5:0f:01:97:88:5c:16:65:e2:97:81:04:00:16:d0:
5d:30:fc:14:27:27:a0:da:58:f0:88:5e:f2:c6:62:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C4:A8:71:54:D0:78:4D:46:99:A3:AA:2B:CD:33:C0:7B:10:54:4E
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:d3:96:27:2d:ec:a6:43:7e:e8:84:aa:4a:23:89:eb:4b:
59:20:ce:cd:8c:45:14:e9:77:b7:c2:dc:8a:60:fa:84:6a:f2:
5d:e0:1c:f0:6e:cb:31:a5:bb:a1:95:ae:6c:5e:99:37:41:68:
65:9c:bd:49:65:27:f4:fd:5f:8b:bd:2d:c8:5e:b7:e6:bc:93:
85:49:2a:9c:c9:5b:d4:f3:33:e6:0f:6d:69:5d:7e:08:df:c0:
6d:d5:a8:da:cb:c1:e8:1a:5c:64:cd:bf:e9:38:13:a9:b0:a9:
5b:75:2f:db:d6:09:3a:0e:ce:56:86:24:4c:62:04:ea:47:6e:
f0:95:f6:b2:a3:e4:e9:a5:d7:72:ac:8f:2b:88:34:9f:9d:2b:
af:c6:5b:4a:18:30:45:da:d8:48:ec:6b:44:84:ff:1b:49:70:
fe:56:2e:f2:ee:01:38:16:58:76:ec:aa:99:ae:9e:f8:b5:e6:
39:f4:45:9f:bf:f9:a1:ba:7b:e4:b4:07:ee:22:7a:fb:b4:36:
a7:14:09:5a:2c:41:42:be:4d:b5:03:87:73:6f:1e:ff:f6:be:
e0:2c:b1:a1:4a:4b:4f:58:dc:ca:8d:5d:8e:f8:cd:52:ef:2f:
cd:e0:e5:fa:cd:88:18:8c:46:82:ae:0e:0e:83:fd:2c:d9:77:
0d:23:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:30 2025 by rpki-client