Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: U5dYhAk4Gf/eDXJX09McX9E3X8noI/hlsQu+wztA5Jo=
Subject key identifier: 33:7A:81:14:91:69:52:29:D9:A8:85:1C:C5:FB:48:2A:CB:FE:A5:7B
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 0197B6A152E580B904F367F51CB372CA17D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0E26
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: kwOfL1Oy+czU6QsQJ9h6HKN8V5rzksv//O7PoS1zI/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:52:e5:80:b9:04:f3:67:f5:1c:b3:72:ca:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=337a811491695229d9a8851cc5fb482acbfea57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:6f:35:9e:be:7c:a3:e5:d9:c8:16:78:43:
d4:1a:a1:29:c5:69:95:c7:fd:cc:8f:83:10:41:22:
da:b1:ef:6a:a5:22:05:ce:d0:85:33:e9:da:81:b3:
2d:da:55:b6:69:60:c6:21:14:d9:80:67:f4:b4:87:
22:ae:4e:96:32:07:b7:0e:f7:53:e0:80:70:cc:26:
71:e4:bc:64:ef:41:76:ca:68:ca:22:bc:05:d7:45:
05:9a:ce:ea:93:79:34:d4:ce:d5:18:1c:38:e3:6a:
11:15:05:32:0a:18:73:b5:f1:f4:3a:8b:62:86:25:
48:26:42:60:be:82:42:77:b2:02:7c:32:79:e4:49:
7f:2b:e0:0e:69:b0:bf:a4:0c:e1:05:40:f4:a5:95:
d4:73:a5:62:a7:45:4f:cc:8d:66:84:b7:f9:e5:b5:
ad:43:76:3f:2c:98:0e:bd:9a:c4:d6:53:a7:b6:fa:
f4:4c:ed:57:c0:d4:9d:16:48:cb:1c:d9:1d:b2:d1:
cd:8d:ff:aa:05:18:7c:7e:c0:21:5c:e3:fa:7d:a8:
8a:6b:8c:f7:20:82:f6:ce:ae:7f:01:08:4f:30:40:
47:f1:8a:81:e0:46:88:b1:8c:15:92:1d:79:ae:99:
7d:67:39:a3:98:e4:f4:46:a1:4a:e2:08:49:54:97:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:81:14:91:69:52:29:D9:A8:85:1C:C5:FB:48:2A:CB:FE:A5:7B
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:2b:4c:32:ea:9e:54:2f:b6:61:37:6b:73:43:d9:0f:0c:
b9:37:9f:6c:c2:7b:74:e0:b3:0b:4d:f0:c3:82:65:ce:a8:c9:
0e:6f:2c:37:9f:3a:d2:b8:32:98:8c:ba:1d:aa:47:11:d8:e8:
46:42:fa:42:f9:43:d9:ba:a1:cf:44:e3:36:d9:59:5b:5b:ec:
7e:a6:52:5e:39:60:8e:14:c9:46:5f:9b:c5:87:73:a8:ce:f3:
37:a7:b0:dd:d4:ce:ad:a0:64:46:01:20:5e:92:69:42:8c:40:
bb:08:f2:ca:95:b0:3c:7f:fd:e2:3c:d7:8f:a0:0e:3e:93:1a:
88:7f:db:0c:e3:0d:8c:f3:a8:25:aa:ee:ab:15:ce:fd:4d:64:
4b:66:3b:b8:1c:70:d1:f4:41:04:91:64:a7:d8:73:fa:a8:80:
a1:d3:3f:3a:a6:d2:0a:23:39:aa:3f:43:e4:23:96:20:7a:5c:
0f:c7:14:a0:c1:20:a4:0b:12:a4:d7:bb:0a:b9:12:82:eb:cd:
2e:9d:81:5a:8d:6d:05:e2:30:80:92:c8:3a:78:6d:3f:8f:ff:
ea:e3:55:9b:31:9e:0b:02:ee:4b:92:3a:46:9e:16:c5:e8:8f:
f3:91:ca:52:ee:a3:38:2f:96:41:df:73:15:cc:46:d3:00:ad:
27:92:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:33 2025 by rpki-client