Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: SqwumzgX0qR68MyxIqk4/yjXPm5dyI5Fyy8ES769aUo=
Subject key identifier: 1D:AF:82:F9:13:B8:9D:03:B6:78:AF:5C:49:C1:82:4F:71:33:DF:1D
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 0197B6A1931641538916459D4D15C4612D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 157E
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: ByfFc+LGjrprqpbSHe4INULUtSUiXpdHh8lCC0BWLCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:93:16:41:53:89:16:45:9d:4d:15:c4:61:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=1daf82f913b89d03b678af5c49c1824f7133df1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:59:14:4a:2e:75:f3:a7:44:93:32:83:6c:
41:99:52:43:ab:ed:db:21:b8:a5:7a:95:f1:eb:c1:
f3:a9:94:de:df:48:5b:14:fd:e4:81:eb:30:9d:57:
7f:10:df:61:46:ac:58:35:69:1e:12:9b:58:b1:61:
61:bd:9a:2b:66:37:69:4e:7e:be:0f:9b:9a:cc:ec:
97:bd:a5:fd:bb:28:97:e2:11:54:74:70:d7:01:52:
88:b0:c4:1a:67:0d:8f:76:94:2d:5e:a5:ee:c0:9a:
86:53:b4:bd:f8:0b:95:9c:ee:f7:3e:f5:d5:6e:53:
86:f9:49:66:82:26:76:c8:f8:13:47:cb:ac:1d:f7:
49:c0:47:bc:de:60:c9:10:56:43:4a:7d:33:e4:c7:
04:f0:c0:81:ca:d7:ae:ca:15:6f:81:4d:94:35:81:
03:07:7b:e3:b0:85:d6:c6:fe:89:75:13:c8:7f:67:
c5:fd:fb:33:dd:4e:7f:51:4a:0e:68:7a:a1:9c:d7:
bc:d5:92:a2:76:35:fe:e1:b6:f1:e4:b7:e3:97:5c:
52:ed:d9:f4:a3:0b:31:6b:7e:42:17:fa:c7:dc:31:
22:05:bd:8a:ce:3b:7c:40:2b:d4:93:46:13:0d:95:
5d:66:e6:01:e5:ab:58:05:2d:22:49:a9:9d:36:57:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AF:82:F9:13:B8:9D:03:B6:78:AF:5C:49:C1:82:4F:71:33:DF:1D
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:2c:ed:a5:c2:86:d5:f9:e8:41:fa:63:16:f1:51:cb:f7:
ef:36:8a:6f:21:e2:c6:94:a7:a0:f5:65:3e:6c:ff:2b:08:ba:
8a:58:4f:17:66:62:bb:af:5f:ac:ae:61:46:44:3b:58:7a:0f:
81:f9:1d:a7:46:22:fe:5f:0a:2f:5e:aa:16:4d:5c:e6:a1:ee:
68:90:e2:00:a0:ae:a4:42:aa:9b:8c:37:d5:94:1c:2d:ac:7c:
a2:12:de:b1:67:61:86:e6:05:d2:a5:8d:f2:38:ce:31:a2:d5:
53:81:2a:67:20:a7:d4:50:bb:c2:cd:60:c9:6e:8a:3d:b1:3a:
8c:a2:a4:db:26:ae:4a:b1:bc:b7:2a:f3:4c:71:83:ef:46:01:
ce:c3:b1:e5:de:58:9d:10:44:41:f0:61:b6:1e:72:96:96:96:
89:30:be:4f:d7:82:58:16:ea:9b:af:a9:9b:57:00:26:dd:74:
90:0a:a8:7b:f4:83:08:7a:5c:2c:d8:ac:96:de:63:7f:32:3e:
ac:78:6e:89:52:a6:ee:7b:ff:0c:8b:a7:8c:06:c4:f6:0c:13:
d3:6a:2d:9a:29:7b:c7:d1:69:02:65:48:b3:b1:7d:2c:36:a8:
a6:a6:b1:8e:ec:a1:97:0d:6d:86:a6:5b:d2:f0:56:73:bf:bf:
55:34:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:20 2025 by rpki-client