Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: 7T7xCqMr0aEfceEgrv7dFOoWsLlxgL/UbQiGbDE2rFE=
Subject key identifier: 29:44:82:3A:34:28:E7:D0:90:A2:46:DC:C7:2B:A1:B5:EB:BE:6B:01
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0197B9A199C0557D43918865C86AD6A35D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 03:01:04 +0000
Manifest this update: Sun 29 Jun 2025 03:01:04 +0000
Manifest next update: Mon 30 Jun 2025 03:01:04 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: vqtsFClzgFMsa4kEzJX7T9vxmnb3M83DsXf61F5jBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:99:c0:55:7d:43:91:88:65:c8:6a:d6:a3:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Jun 29 03:01:04 2025 GMT
Not After : Jun 30 03:01:04 2025 GMT
Subject: CN=2944823a3428e7d090a246dcc72ba1b5ebbe6b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:0c:16:75:86:68:24:3d:e2:ae:11:58:8c:
c2:de:a5:e1:66:ee:d3:ed:ac:69:8b:68:ab:48:a6:
d3:7d:09:0c:8c:af:b4:3b:35:41:40:e8:46:38:01:
85:4e:19:8d:b8:2d:5a:60:09:ad:ea:41:f0:2d:6c:
0c:55:5b:85:ee:74:5a:0c:91:51:92:c3:08:44:64:
ca:d2:91:27:05:4b:4a:b4:b1:04:21:81:38:d7:2c:
82:2c:e6:85:a9:17:0f:4e:c6:d5:a6:12:e2:1b:a2:
f7:51:cf:bc:06:56:d3:ff:c1:f0:71:5b:30:7f:a0:
ba:1e:ee:7c:02:9b:24:4d:33:f9:66:b9:6e:ca:ad:
74:55:f6:7f:de:7c:52:3a:d5:d8:a3:f3:ae:d8:45:
f1:9d:6d:ec:8b:87:d8:2f:11:c0:37:3e:32:54:9f:
5f:1f:ce:2b:24:6b:38:3c:d0:c2:ee:4f:1e:53:e2:
c0:9b:7f:b7:fb:00:4a:8d:45:f0:8e:9a:1d:96:df:
ad:2e:5b:9b:bc:ef:16:63:b2:de:0d:2f:c2:97:31:
80:4a:68:87:62:ff:5b:33:1b:39:28:61:a1:a9:10:
83:64:7b:d9:e1:44:4e:15:e6:e1:61:b6:f8:3d:dc:
5f:68:fa:b7:50:ff:a1:b6:b6:ad:4e:86:6d:e2:7b:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:44:82:3A:34:28:E7:D0:90:A2:46:DC:C7:2B:A1:B5:EB:BE:6B:01
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:9e:ce:a9:7f:08:45:71:0d:08:03:3c:8a:ec:dd:94:63:
ff:d8:42:a9:c3:54:2b:b5:fb:fc:e1:0d:16:74:12:9e:d4:05:
e2:59:58:f3:27:c9:cf:1f:7a:a4:8e:bc:74:69:e2:2f:f8:07:
32:f4:60:4c:59:b4:32:9f:66:5a:b7:f0:3e:fa:40:72:4a:3b:
7e:73:52:6a:7c:02:f3:d0:45:64:62:2b:4c:16:a2:78:b2:a3:
ad:e1:c1:9d:cf:4b:2c:cf:6b:17:32:ff:7c:e3:c5:01:db:ee:
a6:8e:67:c8:c2:2e:27:85:b9:53:65:51:27:01:a2:1f:b9:ef:
9c:f7:d6:99:fa:1f:7c:0e:56:2e:ab:e5:ef:fc:c0:7b:19:31:
ef:b6:64:67:1e:7e:32:e7:27:33:fd:ff:44:fe:0a:ec:07:02:
55:7e:b1:e5:13:bf:6b:af:d8:79:2c:30:90:36:fc:36:01:91:
da:9b:27:88:f7:b8:58:34:cc:c3:50:3e:1f:8b:1c:dd:68:a6:
ac:43:c3:45:47:27:c7:ae:8f:f3:78:bf:97:4c:e4:6e:a0:38:
08:3d:71:26:c1:9e:1c:7a:39:eb:de:d1:86:a0:e1:ef:ee:3b:
15:5b:9a:72:8b:ef:6f:aa:6f:63:11:90:b4:fb:c2:16:eb:6d:
22:8c:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:42 2025 by rpki-client