Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: RYSfoHMFB7oDAFF3TDpg/B0J+UM1eMg4+rouNlvu1Jg=
Subject key identifier: A5:5D:98:18:DB:35:FD:3C:53:55:05:82:66:73:45:93:C6:DF:EE:88
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 0197B8904EDC0A570D089E7C8AB74F495632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0CC8
Signing time: Sat 28 Jun 2025 22:02:34 +0000
Manifest this update: Sat 28 Jun 2025 22:02:34 +0000
Manifest next update: Sun 29 Jun 2025 22:02:34 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: TGAuDyxTQTKJSRI0aC+UX/akCjU/A619sQn00Rdo3MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:4e:dc:0a:57:0d:08:9e:7c:8a:b7:4f:49:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Jun 28 22:02:34 2025 GMT
Not After : Jun 29 22:02:34 2025 GMT
Subject: CN=a55d9818db35fd3c5355058266734593c6dfee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:d9:ce:e1:22:ed:12:f5:59:61:3a:60:d7:
54:ab:22:4b:92:b0:90:53:15:9c:74:a5:08:5a:90:
3c:42:6a:66:7f:3b:97:db:23:66:60:02:8e:d1:b7:
37:0a:3c:69:a7:4c:68:12:77:b9:46:36:9a:b5:0e:
80:0f:0e:f8:d4:7d:3c:e2:23:5a:fa:f6:a4:ec:00:
83:a1:ce:11:c0:95:40:c6:58:14:c4:f9:e6:1f:b0:
25:2c:28:f3:d6:5d:bd:85:f2:9e:94:45:1e:41:04:
9f:f9:c3:60:45:35:66:04:22:ef:5b:89:23:51:94:
a6:66:99:4d:07:54:56:8f:ba:be:12:0c:71:19:b8:
02:e6:ab:6d:8c:d2:e0:f5:6f:80:6d:d5:b3:4b:df:
8f:b9:d9:1d:11:8e:90:70:99:27:ae:7f:5d:78:2a:
b5:db:44:6e:31:a9:64:23:78:2a:5f:09:fb:2a:e4:
96:14:51:03:a5:43:3f:fe:8f:85:cb:3a:f5:08:4e:
18:66:30:81:3f:02:28:bc:bf:fe:f0:31:3a:88:d1:
7b:9b:f0:bd:de:10:01:39:30:6b:4a:1c:f6:49:ba:
7e:32:7d:ea:4d:0e:c3:69:0a:4a:1a:5b:84:9f:8f:
98:b1:58:f7:41:02:f1:8d:20:f9:d6:7b:5c:9e:10:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:98:18:DB:35:FD:3C:53:55:05:82:66:73:45:93:C6:DF:EE:88
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:93:ad:92:7d:ce:c4:61:91:fd:09:c5:4f:7d:00:99:80:
d9:cd:4f:23:83:5a:c8:47:0f:8e:c4:0c:21:2b:71:df:d4:be:
87:a1:36:c9:bf:88:ae:ca:23:2c:b9:d8:21:d1:59:41:7b:46:
e6:17:b5:b4:99:fc:1a:60:18:43:88:00:34:5e:0f:4a:4e:a1:
45:dd:28:e0:ca:85:63:39:f1:0c:4e:e8:e0:9f:7a:27:c0:e7:
aa:df:9b:aa:2d:90:48:1c:85:77:e6:1a:46:7e:4c:28:06:56:
fb:fc:b5:03:ea:a6:64:44:c5:a3:08:60:84:04:e0:44:bc:be:
8d:ae:3d:18:32:99:77:9a:63:63:af:f1:0e:30:57:84:b9:32:
97:d0:6b:37:0a:76:df:77:b6:6f:06:3b:ac:a2:ee:cb:d3:e9:
fb:a8:d7:dd:a8:76:27:f1:aa:bd:46:97:e6:3c:84:bc:9c:80:
e4:7b:13:80:19:fc:2c:cc:c1:8e:7a:b2:b1:a0:05:19:b3:4c:
0b:de:6b:a0:46:95:1c:12:fb:74:d6:83:a2:54:3e:53:37:61:
1e:94:87:56:88:46:a9:20:36:1a:91:36:1d:ba:81:04:31:34:
4c:63:6e:51:0f:06:e4:71:61:05:7e:8c:18:17:a9:24:63:62:
b6:0e:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:28 2025 by rpki-client