Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: 1D3eoCGIzAFXm8FmKmPIrxlRfDlQIeD8FAQNJPQDMtU=
Subject key identifier: AD:C0:60:C6:A2:57:76:A5:DF:4E:AF:E2:B4:59:29:CA:F9:03:9A:C8
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 0196B9A460DA186BC6E586DB909DCC7D650F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0EAC
Signing time: Sat 10 May 2025 10:01:19 +0000
Manifest this update: Sat 10 May 2025 10:01:19 +0000
Manifest next update: Sun 11 May 2025 10:01:19 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: T6cmMHqDA0JBFk1J5IqClxHWa5/MWmzs71YarZ0xML8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:60:da:18:6b:c6:e5:86:db:90:9d:cc:7d:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: May 10 10:01:19 2025 GMT
Not After : May 11 10:01:19 2025 GMT
Subject: CN=adc060c6a25776a5df4eafe2b45929caf9039ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:b8:af:9a:a7:5e:67:0e:ea:73:71:3b:69:
1c:b6:fa:97:5a:e5:4f:b8:36:ff:e7:57:c7:4e:0b:
4d:4d:3c:6c:be:37:28:86:2f:8e:dc:44:66:78:3b:
50:ea:62:aa:0f:b4:73:ec:4d:ab:85:35:d1:90:17:
ad:eb:96:c1:47:f0:c0:0f:80:50:43:cb:99:61:e8:
af:2e:b3:c0:81:62:e0:2c:2f:ef:3d:04:1b:0a:98:
6c:29:dd:ba:0d:ac:30:e4:f7:a8:05:a4:3f:ba:e4:
0c:8e:92:40:ee:f4:c5:53:2e:18:4c:87:d1:68:32:
85:11:f2:9a:ad:18:d2:3e:a3:b8:00:b4:81:02:ed:
5d:c9:19:ee:78:f9:c5:1d:f0:57:67:c2:26:b5:c9:
f9:8e:92:c9:03:c1:e6:11:06:5d:a9:e4:30:b7:c3:
b0:c6:a2:37:25:ea:5c:2c:f3:d0:5c:3e:b0:31:ec:
ba:cf:31:f3:66:23:c7:f4:0e:58:e0:2d:d9:20:5c:
3e:d6:8e:35:61:f6:06:8b:cb:3c:f7:1e:f4:e0:4f:
fa:7b:6b:25:fd:95:0d:ac:a5:0b:f9:b7:9e:7d:8d:
8f:d7:df:03:8a:11:8c:3c:07:28:4a:c4:9f:36:f4:
97:1b:66:3c:19:eb:d9:ab:df:41:70:a4:1c:eb:8a:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:60:C6:A2:57:76:A5:DF:4E:AF:E2:B4:59:29:CA:F9:03:9A:C8
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:8e:86:78:3e:8f:c0:04:6a:f0:95:c4:8b:18:ee:0d:cf:
c3:b6:60:68:41:0c:36:da:47:e4:e9:3e:62:ba:7c:17:cb:e5:
88:b7:68:61:22:65:b2:f9:59:c0:b9:04:e0:5f:59:41:59:d1:
d3:40:87:d5:07:08:37:90:d5:a8:76:2e:1d:5d:e7:5f:2d:8b:
7a:82:37:79:df:da:0c:9c:75:d8:4e:79:d7:03:bb:50:32:cc:
e1:62:5b:7f:bb:58:e6:76:b9:69:b5:e6:96:c0:c5:2e:fe:09:
6b:82:7b:92:2d:ae:53:46:e7:e7:45:fb:e5:16:4e:90:60:c1:
a5:9f:4a:ec:72:a9:e7:3a:c9:23:c0:41:b7:58:de:0a:80:8a:
19:b8:34:c1:0d:1d:ac:16:cb:e8:b9:89:0d:d8:2c:a9:d3:0e:
cf:38:e1:89:78:0a:1b:c2:7f:56:f7:b1:b4:36:46:f4:b7:89:
ef:3a:9a:b3:14:59:c2:05:d4:f4:52:ec:82:82:17:3d:19:86:
6c:bf:cc:77:41:69:1c:68:2d:e3:3d:33:eb:7e:97:92:48:d3:
97:d5:77:8c:f0:55:a3:94:71:46:a3:ec:6a:4c:fc:40:25:65:
77:d8:5e:28:64:1a:e9:8f:f7:81:07:ef:00:e6:fb:04:77:e9:
8e:e1:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:08:46 2025 by rpki-client