Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: VpxkQ13EHbs8djY8qhCsw4MkYdPK9QEvwciF9vQb/oU=
Subject key identifier: 37:F8:84:8E:AA:9F:89:01:30:1D:2E:13:A5:3A:27:6E:BC:58:76:46
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 0197BA7DAA9955A1448CC9497B901B1EE8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 07:01:27 +0000
Manifest this update: Sun 29 Jun 2025 07:01:27 +0000
Manifest next update: Mon 30 Jun 2025 07:01:27 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: NZ5B2ublfP98dlzaJ/YHnHJATtVb+aWN6BOV6i/DUyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:aa:99:55:a1:44:8c:c9:49:7b:90:1b:1e:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Jun 29 07:01:27 2025 GMT
Not After : Jun 30 07:01:27 2025 GMT
Subject: CN=37f8848eaa9f8901301d2e13a53a276ebc587646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:34:5b:c2:c3:2a:64:7a:d9:3e:e9:28:dc:
ed:27:f3:a4:52:c6:c9:0c:2a:24:c4:13:b0:b5:2d:
41:85:6f:ca:d9:44:2d:52:98:df:05:ca:b7:6c:e2:
c2:f6:6e:27:42:2b:40:33:58:16:5d:13:2b:06:f5:
fe:35:58:72:40:cf:50:3e:1f:32:95:ae:91:2b:7f:
d0:c9:29:13:b6:4e:a2:f7:07:2a:f4:8f:33:52:91:
ea:07:09:28:79:dc:8e:1f:be:23:ca:4f:2b:45:c4:
52:89:28:ae:2c:fe:05:0b:2f:5e:50:2f:b7:3f:57:
33:c0:1f:b4:09:5f:3b:c9:2e:b6:f2:9c:f6:97:48:
f6:02:7b:20:79:67:0b:89:ae:70:08:4c:6e:78:e7:
81:c9:ca:f0:d6:c4:69:58:f6:55:99:ce:4a:6c:c1:
ce:9c:e8:22:c1:e6:d6:86:a7:ed:43:cf:fe:78:4a:
51:8b:c7:17:6d:64:39:c0:9d:14:f0:47:2d:c7:42:
66:0e:32:ab:af:28:6f:f5:68:c7:19:d2:cb:6f:df:
d9:da:c3:e1:00:75:2a:df:e1:6c:44:7a:43:92:f5:
c7:24:48:6a:33:99:c4:7c:9a:8a:aa:77:4a:2d:17:
73:66:4e:ea:70:d3:3a:38:fc:83:e8:65:b6:99:11:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:84:8E:AA:9F:89:01:30:1D:2E:13:A5:3A:27:6E:BC:58:76:46
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:17:a8:fd:70:2a:2d:0b:5e:a9:c3:5a:6a:fd:ee:e9:e5:
79:2a:fd:97:59:af:50:ab:94:5e:82:2e:e7:f9:dd:ef:05:ef:
83:95:69:79:8f:db:da:f9:02:60:04:9a:ab:ad:d2:26:44:d8:
c2:e4:08:29:fd:83:6d:22:53:8c:1b:44:12:d1:14:0a:5b:40:
54:cf:f4:5c:b3:0f:fe:a5:4f:bc:a4:c5:48:9b:09:93:4a:fd:
5d:93:be:09:f0:87:f4:41:c6:e5:b9:a9:86:94:15:07:7a:35:
02:e6:26:fc:d3:06:06:8c:35:c6:25:2b:92:03:c8:50:5c:46:
58:21:73:7c:4c:57:ba:6d:ac:e9:63:23:72:6c:37:ec:f8:e5:
f5:ad:c5:7a:3a:89:bb:00:0b:4c:ee:46:35:05:40:02:66:5e:
d4:ad:8f:96:56:72:4c:a5:ee:83:60:08:3b:6f:53:0c:d4:55:
53:a9:c0:87:68:ff:71:5d:7d:fd:70:a7:03:4b:7b:47:5a:8e:
87:52:ef:19:aa:bf:02:89:db:54:9b:78:8e:8c:aa:b3:3b:0a:
fc:a8:e6:b2:7a:09:28:d6:66:98:f9:34:43:71:3e:24:11:62:
d6:bf:3f:e8:87:ef:3f:97:06:9a:76:bc:04:ad:46:44:4e:b8:
c7:a6:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:18 2025 by rpki-client