Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: w4qjJHnp6rLXlDJsnQh4h1ioGwArbNiAn5pdrkuXFF4=
Subject key identifier: 27:1F:24:86:4A:EC:06:1D:49:E5:35:D2:C8:63:60:BC:0B:CE:7E:81
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 0197B70E6BD6241DA562E44DFC21926EB15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: 0+1OPa0m80CNnHWdBY3NORqx9fr+90eEkyFeGLEaw10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6b:d6:24:1d:a5:62:e4:4d:fc:21:92:6e:b1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=271f24864aec061d49e535d2c86360bc0bce7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:56:4e:bb:95:f3:68:bd:54:ff:13:6a:a2:
58:39:39:1b:3d:8b:4d:41:ba:22:f0:8b:7e:c8:e4:
93:0e:b0:08:dd:32:fd:67:59:94:f7:72:9f:b1:2f:
b2:af:69:27:36:8d:cd:b4:91:b0:55:50:26:66:f4:
49:c1:26:a7:6a:6e:c8:81:5e:5d:02:0e:1a:a6:1f:
8f:f3:b3:da:72:ea:ef:ba:4f:06:85:2c:42:07:f2:
f3:e2:b1:19:35:d3:37:5f:cd:11:3c:7d:fb:ac:2b:
b5:be:0e:34:38:91:8d:12:ef:b6:3e:2d:10:95:15:
99:ab:18:5f:77:f1:0f:33:51:31:3c:2f:ed:9e:31:
87:a2:62:c2:7b:62:e6:f8:d6:16:d6:46:6c:1d:6f:
05:8a:70:68:93:14:a0:7d:89:a6:06:35:ca:04:22:
80:dd:9b:ad:70:cf:a1:4f:9b:04:47:29:3b:bf:27:
c0:e7:9d:7c:3a:5d:50:7d:bb:24:73:ba:7b:0f:b9:
53:ac:b0:bc:4c:c4:4a:33:a2:fa:ed:af:c1:58:67:
6f:dc:db:48:0a:25:e2:e4:9e:02:97:af:9d:90:23:
19:83:80:00:dd:7c:69:8b:df:6c:7a:a2:82:b2:23:
13:9a:5b:8e:3f:c8:f1:44:ee:9c:6b:d9:51:d2:01:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:24:86:4A:EC:06:1D:49:E5:35:D2:C8:63:60:BC:0B:CE:7E:81
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:80:c3:ee:bc:45:43:81:3d:14:78:e7:58:ab:95:4f:8b:c0:
42:86:bd:43:d0:60:f9:34:2b:06:65:e5:bf:32:1f:8a:53:8b:
92:81:9e:09:15:10:89:de:14:fa:63:7c:06:70:0b:58:ba:8f:
cb:6e:58:52:e3:5a:73:6c:7b:54:7e:2f:53:0f:a4:70:c6:fb:
5e:6f:6d:96:3e:09:67:a2:55:79:fc:73:94:01:58:0c:0a:69:
6a:d1:23:59:e5:3b:a9:88:ab:e8:fb:4c:ce:2c:85:8d:eb:78:
09:c1:5f:64:68:10:7d:cb:39:a6:42:bd:8b:63:f6:b8:bf:c7:
0f:fe:1b:82:e4:43:8a:84:06:4f:86:8e:5d:4c:bf:b2:7b:e1:
8c:ce:5c:99:cc:91:0a:ff:c6:8d:de:95:5b:5d:54:88:ab:7c:
cd:9f:b6:13:cf:ae:f8:7a:a8:cd:b2:9b:f7:d8:52:43:e1:29:
3e:96:3e:be:d7:8c:17:1c:63:78:4e:40:f4:1a:87:d9:57:44:
6b:f4:66:9a:b8:ad:a1:bd:88:3a:a5:7e:1e:9d:2f:e7:a8:ea:
98:53:fb:ec:e5:00:21:4f:21:19:dd:c1:c7:e5:9b:b4:c5:b5:
27:8f:41:de:3c:7b:19:a0:36:e2:0f:ab:2a:9a:2b:70:e2:05:
03:00:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client