Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: LbQRmmEcB+w9O1imB2EFVJu0u2l7Sejtw/vVj70ohtE=
Subject key identifier: A7:F6:41:52:37:5B:E9:98:1E:B7:90:34:0C:BF:37:C8:E2:58:D4:C6
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 0197B6A20052474F1C5FCD7DF5CBBCE756AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 0E1D
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: B8SX0N1p1Sd2iqV3ZkSKSEoFp/+C0rjdVzlyPx5Jhg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:00:52:47:4f:1c:5f:cd:7d:f5:cb:bc:e7:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=a7f64152375be9981eb790340cbf37c8e258d4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:8b:b4:db:73:f3:4f:6a:90:9e:5d:a4:55:
ea:06:a1:59:d6:b0:61:bc:e1:fe:9a:d3:9f:cb:34:
e8:81:d2:b9:1d:be:3f:46:8d:b8:51:36:c2:7e:07:
d9:b9:98:3f:f7:a8:7b:58:fa:5d:78:24:79:21:84:
47:da:48:40:e0:9e:1a:42:0e:7f:56:b5:db:03:cf:
8b:c7:51:71:9e:34:cd:1e:04:d9:46:68:0f:1a:fd:
77:38:ee:f4:0f:ca:6f:0d:21:91:fa:3f:27:82:c4:
ef:6b:66:af:42:1c:cf:b3:59:b0:b0:ae:ac:49:54:
14:89:33:94:7e:f4:6f:1b:3b:78:20:b5:b1:37:45:
96:1d:f1:5c:80:26:4f:3b:93:fb:62:cd:c7:bd:ae:
4c:b8:17:a8:3b:80:5f:23:7d:87:81:f4:78:69:68:
b2:87:01:c2:a0:fb:60:a6:91:26:ec:e9:1a:61:69:
93:86:d6:49:97:09:11:4e:80:e3:b2:28:5f:dd:d3:
2d:61:0a:f3:ef:36:8a:a1:cf:f5:8d:b5:2b:ad:20:
e1:97:f8:88:fa:ae:c2:ab:4e:0b:89:64:50:c5:3b:
81:35:c4:97:45:bb:d5:b1:2e:a7:99:c8:0c:a6:84:
8d:e9:aa:83:a7:de:16:ae:03:7a:c7:e0:94:13:e7:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:41:52:37:5B:E9:98:1E:B7:90:34:0C:BF:37:C8:E2:58:D4:C6
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d9:35:80:4b:38:46:cf:92:bd:d3:c2:1e:94:79:95:3b:2a:
92:77:00:bb:c8:50:20:4e:5f:ae:c9:95:dd:b9:2a:fe:c5:3b:
80:63:55:f8:a6:fd:69:ba:45:8f:92:9e:af:ae:d9:87:10:1e:
d9:71:90:e4:7b:86:84:9e:f1:68:66:6d:dc:23:02:cf:a2:3b:
24:91:cc:6a:4f:a2:37:8e:c5:b5:33:4e:5b:74:f1:cb:a0:3f:
e3:fa:2d:e5:95:f1:e8:50:18:06:01:1f:59:93:75:2a:83:70:
9f:02:8f:25:fb:a6:28:a1:df:a8:fb:6e:58:34:30:2c:9c:42:
05:29:06:ae:fc:ab:77:2f:9d:47:2d:80:76:47:41:9e:49:70:
b6:cf:38:ee:9d:0a:d6:fb:e8:48:27:e7:77:80:56:40:57:cf:
89:19:16:29:80:c3:53:31:6c:57:8e:8f:86:62:d6:4b:72:1f:
4b:d4:3a:29:2a:4e:67:9c:ef:16:dc:c0:61:93:99:fc:e4:d9:
4e:f9:15:35:e5:2c:ad:0e:91:ee:f6:40:72:03:5c:91:5f:7e:
3b:d8:a4:2f:75:44:8d:1a:27:bc:95:58:93:d8:d5:dc:a9:a8:
05:61:f5:13:f5:da:18:fe:4a:43:41:f4:a5:ce:07:69:8b:0e:
a5:2a:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:15 2025 by rpki-client