Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: +H5fdi4AhlAu9SkwM/vzMey2bxsPE9+kITBn/BuuaKw=
Subject key identifier: 84:B9:5D:7D:A5:52:36:5B:FA:2C:A4:88:68:48:74:5B:ED:D2:0D:51
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 0197B70EB559E364F2693CEDB6E4DE7A0E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0C2E
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: ymKwYuYLeQE/puX6HPNUbopmlToqWCM7q48DliMQ7Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b5:59:e3:64:f2:69:3c:ed:b6:e4:de:7a:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=84b95d7da552365bfa2ca4886848745bedd20d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:09:3c:53:30:50:45:f0:68:c3:90:37:6f:
82:0d:00:fc:93:af:d3:70:6c:72:c8:3d:70:87:68:
15:f9:97:da:7b:98:ca:0a:a0:31:4f:38:c0:78:46:
6b:ba:c0:71:54:4b:a2:58:db:80:e2:51:9a:a2:cb:
b6:d7:77:f0:42:4a:82:ef:75:d7:42:0e:91:59:aa:
f4:42:a2:c8:47:36:4e:ca:40:e8:b2:66:86:db:cc:
e8:0e:22:0c:94:84:cd:33:97:a1:89:0d:70:4d:10:
55:5a:91:02:93:1e:03:e8:90:56:06:ea:b7:d7:04:
ab:ae:24:08:9c:d4:4c:7f:84:b5:06:a9:43:72:ab:
5a:3f:a2:bc:d3:27:89:4e:cd:69:ca:aa:6b:21:b2:
cf:4b:e9:2c:cd:f5:98:63:dd:58:4d:fc:61:57:2d:
78:f6:2d:61:6a:df:2f:47:da:ef:f4:73:0c:7c:f8:
f8:d2:3c:cb:f6:a8:93:63:b4:81:93:8b:cb:ee:a7:
1c:5e:44:54:fa:8f:74:d7:70:4f:21:5a:53:f0:91:
69:7c:52:34:b0:14:4a:38:88:fa:76:09:6f:ed:47:
f1:be:be:1f:61:4a:fd:b4:7f:15:16:e1:86:4b:21:
b9:1f:92:b9:c5:3f:e3:7a:58:ed:3a:f1:0e:cf:c2:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:5D:7D:A5:52:36:5B:FA:2C:A4:88:68:48:74:5B:ED:D2:0D:51
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:34:dc:68:cc:06:95:ff:44:2a:74:54:29:87:2b:85:da:f0:
cc:7c:79:f1:7e:db:69:d1:5b:aa:42:ac:a0:1e:16:23:ef:57:
2d:9d:92:87:c8:58:cc:eb:9c:bd:0d:05:5e:d6:ec:32:0a:48:
99:31:2b:13:63:77:42:2e:74:a3:99:63:af:80:46:a9:a6:96:
7f:65:5a:32:cc:21:1a:7d:ef:e7:2b:e4:08:e6:9e:10:59:d7:
a6:f9:d8:5d:1f:28:22:38:1d:99:a2:d2:49:d6:6a:9e:a8:1b:
66:1a:41:b4:1d:8a:5f:80:4f:72:43:7d:22:fe:3d:f3:e4:1c:
61:b8:d8:b4:fd:d4:52:92:24:25:e4:66:9a:b7:75:71:c3:d4:
de:ce:d3:96:d6:23:5d:9c:1b:65:b5:c1:26:ce:6b:e6:6f:95:
8c:60:51:f7:4e:f2:4f:eb:09:d2:1a:c7:7b:c0:2b:fa:96:af:
c1:19:d5:d6:5c:e3:25:44:5d:53:8b:2b:1d:8b:6a:4c:0c:8d:
fe:d5:ea:ab:09:98:e2:e4:4c:d7:01:5a:fb:ee:ba:02:32:b1:
2b:7d:37:0c:52:d9:07:c3:1f:fd:b1:a6:2a:6e:1e:f8:7b:9b:
dd:63:85:ea:20:4f:f6:d3:ee:e6:d2:5e:c4:75:19:6a:d8:46:
bb:7f:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:22 2025 by rpki-client