Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: rN6V0Oh7Nauav4+SdhoviVTqy8yVMOk4ksYGKdi25BQ=
Subject key identifier: EB:BE:64:B8:BF:12:2E:C2:02:FC:3E:25:5D:68:53:86:9E:68:83:C0
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 0197B6A05036A554A8D10F372B371C77E7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0F2F
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: A6aXlkjzKYMOhiIBFsqIBZbyB1de71pQHb4Pj8e1xD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:50:36:a5:54:a8:d1:0f:37:2b:37:1c:77:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=ebbe64b8bf122ec202fc3e255d6853869e6883c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:25:b2:ee:62:6b:8a:7f:8b:75:b3:82:87:
ec:57:f2:c8:8f:56:b9:9d:aa:5b:c3:a4:b2:89:11:
bb:1e:df:ef:82:0c:8c:cc:ff:60:1a:12:34:ba:5a:
7f:82:d6:da:00:7b:70:4e:8f:cd:a4:2f:94:37:2b:
80:a5:79:bf:fa:93:43:a3:79:45:61:d1:7d:8d:1e:
fe:9a:21:4c:f0:eb:2d:59:7f:b1:4e:e7:02:9d:e2:
cd:bb:5a:a6:ca:c2:4b:90:ee:3b:85:61:1a:1c:32:
85:05:e3:8a:48:bc:1a:db:ce:23:cc:96:e8:b4:e4:
a5:e1:06:40:e4:16:06:9c:67:15:12:10:22:26:8f:
9a:98:22:e8:62:d9:4b:fd:2f:45:e6:0b:26:c7:d5:
66:63:b7:1b:ae:b4:5b:21:d4:47:5d:e8:fa:4e:67:
a8:37:ad:e4:1f:31:d3:0a:2f:92:0c:2a:8f:04:88:
5e:d2:30:69:45:d7:0e:db:bf:03:f5:9b:38:e4:1a:
93:45:34:8d:54:68:a4:de:0a:72:ab:bf:3d:2e:ad:
c2:f4:b0:c4:f8:01:10:55:26:3a:07:6c:6e:23:24:
4e:44:f6:68:56:a1:3e:41:d1:f1:67:c6:10:cd:49:
30:b4:e6:40:c7:d2:32:4f:7d:69:5e:f2:c4:ae:15:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:64:B8:BF:12:2E:C2:02:FC:3E:25:5D:68:53:86:9E:68:83:C0
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:f2:e4:ee:4e:bd:5a:26:c2:56:a9:12:60:54:df:33:3e:
0e:f0:f9:fd:9b:be:8a:6b:c5:6d:6b:37:48:9b:3d:63:c4:75:
ba:ac:ef:e0:a7:2b:aa:78:2b:72:2d:01:7b:a1:41:b8:97:92:
39:16:3d:61:a1:4b:18:fc:1f:22:5f:2e:36:ce:57:b7:28:82:
87:ca:6a:0f:1e:25:b2:18:4e:e5:6c:5d:f7:a9:cf:1b:5e:c2:
84:8c:81:ab:4e:7d:28:06:65:bd:53:53:eb:25:dd:8e:12:24:
3b:3d:7e:10:23:17:9f:af:d9:88:08:9b:4c:8b:b5:8c:95:52:
37:ea:65:bb:07:a4:b5:01:fb:77:8b:93:4d:32:f1:d2:ff:9b:
de:59:0b:25:ea:21:c7:80:0e:8c:b9:38:de:6e:a1:82:7b:d0:
d3:7c:66:cd:1f:a1:e5:57:ba:5d:0b:66:ce:78:48:9d:5a:db:
f0:24:2d:b7:da:d0:e2:89:e0:97:91:0c:a3:51:85:70:76:fc:
2c:b0:65:0d:3b:e7:9e:7a:b7:a9:82:58:46:21:2f:88:04:b2:
05:3f:ca:a3:0a:5a:55:63:2a:65:6a:ed:d7:72:85:7e:b1:c1:
b5:9b:82:7d:cc:74:a1:3d:5f:6f:d5:dd:b9:2d:0d:bb:df:77:
a8:c1:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:43 2025 by rpki-client