Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: VzCK+kCXLfTmLLJL/UWWGL6TOYjkwiUdnuVKGowckQA=
Subject key identifier: F7:18:16:3C:0D:F8:4A:6F:7E:10:C3:AB:F8:CB:DC:1D:AC:F9:41:24
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 0197B89042114DF1B45C9A804FB53BB609ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: PVAuEQt5EITz3ypE97O7/cXhNd+42J4TntDrJ9w44NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:42:11:4d:f1:b4:5c:9a:80:4f:b5:3b:b6:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=f718163c0df84a6f7e10c3abf8cbdc1dacf94124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:1c:00:96:35:56:e7:0f:4c:6e:d5:fa:5d:
0d:d4:29:ac:1e:eb:eb:0f:7f:f8:29:d4:ca:25:8a:
64:79:8a:f9:99:77:1c:38:30:a9:9e:15:35:02:1b:
64:02:4d:ae:6f:85:b6:73:5f:5d:bd:ad:0f:e1:d4:
68:36:70:a1:76:a7:61:63:d1:d2:bf:a3:42:a5:9b:
98:73:7c:f1:88:ae:18:9d:ef:0a:22:07:6a:b5:71:
84:b2:65:de:87:22:7d:56:fb:3c:ae:0e:b6:5d:df:
ea:9b:a1:51:6c:f5:70:eb:16:50:bf:6b:11:db:97:
db:32:bb:fc:fd:42:31:22:f1:9f:b7:ad:a3:16:01:
82:46:80:6f:2f:1f:2e:0f:1b:20:81:ca:8e:ec:3d:
cd:25:62:c6:10:4c:cf:dc:7a:aa:d8:a2:01:bf:d0:
a6:47:fd:b9:39:50:10:f2:9b:a7:1f:d9:b2:46:cc:
62:ad:c7:1d:ed:61:9c:f2:3d:fa:90:7b:ab:46:b4:
65:a8:86:21:05:05:dc:0b:8f:04:c5:a7:6b:34:c0:
c1:af:66:5f:37:46:11:f2:19:3b:fc:59:31:29:f0:
60:e6:27:e9:4f:17:f8:e7:63:32:84:b7:64:a8:c3:
1b:95:ea:20:d3:04:f1:2a:8c:96:43:43:f9:d6:5e:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:16:3C:0D:F8:4A:6F:7E:10:C3:AB:F8:CB:DC:1D:AC:F9:41:24
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:5c:e6:3f:5f:36:a3:54:9b:8d:6c:95:11:f2:79:47:24:
ce:04:1c:19:a3:4f:e4:2a:bd:b9:7c:03:3d:93:8c:e7:07:e0:
d4:0d:77:53:f6:21:33:60:05:bc:7d:fc:06:92:1f:6f:3b:d5:
4b:29:b8:d1:1e:64:4e:92:40:89:51:1a:0f:c5:44:7d:8a:d9:
7a:a2:5b:5e:9c:cf:59:ee:6d:9e:30:2d:5c:a7:80:3b:7e:38:
0e:15:34:ac:82:a5:ae:71:e1:cf:b6:33:c5:68:13:2a:d2:0b:
9e:1f:2a:44:0b:15:78:16:42:76:32:04:d7:b9:91:69:1e:67:
09:7c:eb:15:08:af:70:01:b7:af:f2:35:26:de:7a:ed:a0:97:
1a:85:d0:39:3a:d9:13:33:fb:d3:02:3f:69:23:5b:4e:b9:e4:
bf:64:ea:71:ae:17:77:e4:03:c2:b1:6a:2a:db:95:83:73:bf:
4a:66:66:a2:2b:29:a6:2f:db:ab:bc:a9:e0:78:9d:91:b8:a4:
b2:de:47:df:a2:8a:82:5f:89:84:46:00:47:b0:aa:a8:59:52:
b9:4d:42:4f:c4:b3:87:2d:c8:ff:d4:6c:c3:ee:37:bd:7b:bb:
d2:c7:62:3b:07:26:e9:18:f4:eb:e3:8e:3c:99:78:86:e4:58:
c6:53:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:59 2025 by rpki-client