Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: 16aIwydArHT5fCQxrLMPK+21T/JVDzz5IhVcWZaT9o4=
Subject key identifier: 73:A4:1C:04:0D:0A:D0:7E:43:07:F5:39:8F:EC:D4:13:50:17:34:23
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 0197B88FE30D171A3940C8F310A7AFA90AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 11D2
Signing time: Sat 28 Jun 2025 22:02:06 +0000
Manifest this update: Sat 28 Jun 2025 22:02:06 +0000
Manifest next update: Sun 29 Jun 2025 22:02:06 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: ovqnKA5ZxMHnvSytAH1BLIoTmchCeQTpoldIi6SuL24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e3:0d:17:1a:39:40:c8:f3:10:a7:af:a9:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Jun 28 22:02:06 2025 GMT
Not After : Jun 29 22:02:06 2025 GMT
Subject: CN=73a41c040d0ad07e4307f5398fecd41350173423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:2f:f8:44:5d:9b:6e:05:3b:15:a5:df:c0:
2e:bb:0b:46:9c:67:fb:c4:bf:47:00:9e:93:1f:17:
fb:41:5a:8b:fc:b6:76:45:2e:f8:c9:42:15:71:b0:
72:0b:1a:3a:2c:24:2f:ce:3e:7f:1c:7e:10:34:de:
33:da:77:d4:32:92:04:0c:49:e2:30:5a:75:03:2a:
35:2e:68:53:f7:2d:68:3a:b6:c4:3a:11:9a:e5:de:
b4:62:63:3f:d8:3f:dd:e6:b7:ce:a4:ee:e9:ad:3a:
af:1b:2d:47:b2:50:cd:19:9c:6b:0e:80:3d:ea:97:
57:6a:02:f5:27:f8:70:35:8a:f1:76:97:c8:de:73:
b7:15:fa:4c:9d:db:26:0d:3a:2c:4e:82:d5:a0:ca:
dc:f5:7a:62:4e:21:66:9f:f5:b9:ec:d1:b0:3c:a4:
05:6c:6d:24:e3:33:78:75:6b:3f:2c:73:8a:b0:cf:
b2:cb:37:50:14:3b:a8:b5:bc:64:cd:d4:0d:d9:2f:
af:23:60:1d:0b:a2:6a:28:4f:2f:ef:38:e1:aa:6d:
da:97:29:dc:be:00:36:54:e7:96:9c:0c:57:be:f6:
e0:bc:ec:3d:d3:ae:b8:4e:97:00:6b:ee:db:ef:f8:
2a:f4:31:ff:0c:34:9e:c9:58:c2:45:8a:d7:99:ac:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:1C:04:0D:0A:D0:7E:43:07:F5:39:8F:EC:D4:13:50:17:34:23
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a0:7e:ce:78:7c:c5:be:42:4c:2f:02:2e:c2:f3:28:0d:42:
9b:06:37:9f:97:06:16:1e:ad:23:c6:4d:2c:51:12:9a:da:3e:
a9:23:27:97:e3:f5:e2:41:f6:77:f4:a4:f4:a7:b6:2b:5f:05:
64:ea:03:ef:32:26:17:7a:fd:2e:65:61:e0:9a:5d:ec:c2:ce:
84:e8:e1:1c:93:81:8b:61:00:d1:66:79:84:2d:d2:74:07:d3:
3b:e8:08:3c:36:b9:29:e5:11:3c:b0:e5:69:f8:65:00:f9:7c:
71:d8:6a:4b:9a:a8:1d:a9:04:d3:8b:64:18:50:99:44:7e:9c:
07:d6:ec:cd:a4:79:cb:55:0c:53:91:b7:03:09:59:e7:8f:60:
f7:0e:f1:29:97:13:e0:57:f9:2e:52:99:22:cf:b2:c5:17:68:
32:0e:33:19:eb:bc:26:51:31:4b:d8:d1:76:d9:ff:c4:38:06:
18:d1:54:38:5d:07:4a:b3:4c:03:87:a7:91:52:af:4b:fd:ac:
06:f8:9e:88:ee:40:34:52:f1:a3:fd:06:2c:e2:d5:34:b0:1c:
e7:d5:3c:5c:93:8a:13:d3:b5:54:d7:9f:70:b1:bc:43:4a:80:
be:de:7f:87:78:0f:b5:16:a3:e2:d5:1d:a8:b4:7d:f0:8a:55:
80:45:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:57 2025 by rpki-client