Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: TL7Rkys0rJLSeeKfP7nxiKlsRWRpEa7g+88i91JGpW4=
Subject key identifier: BC:1C:8E:10:DA:12:02:96:6B:E2:4C:35:C2:7C:2C:FD:0D:DE:A8:B3
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019771885B6F6405A9EB93293B59680A1B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 03:00:50 +0000
Manifest this update: Sun 15 Jun 2025 03:00:50 +0000
Manifest next update: Mon 16 Jun 2025 03:00:50 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: DXPUGh3oy/cyFjgJyLvDZcgOquB6rW+LD2qkTBRf+TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:5b:6f:64:05:a9:eb:93:29:3b:59:68:0a:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Jun 15 03:00:50 2025 GMT
Not After : Jun 16 03:00:50 2025 GMT
Subject: CN=bc1c8e10da1202966be24c35c27c2cfd0ddea8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:69:7b:51:ce:80:36:be:1b:bd:0c:9c:66:
24:62:f1:d6:67:cd:67:46:3b:a8:22:c6:a8:87:9c:
38:c4:37:d1:e0:6e:c0:8e:a8:bd:73:e6:a5:ec:9d:
49:06:17:09:ff:14:82:88:2c:45:42:a4:0d:dd:9a:
8d:7a:79:a4:84:45:e5:8b:86:68:78:81:a6:d5:e0:
d4:97:8e:09:cc:fd:c4:09:d8:38:4f:69:d9:cb:b4:
37:f4:75:f4:51:e6:64:c3:42:c9:f1:e6:8a:43:b6:
a6:ce:e8:42:6d:6d:f7:c5:2c:0f:c8:c0:ce:2b:59:
15:e0:38:62:e7:ad:f1:ba:52:36:59:fb:db:44:70:
b1:4b:cd:ce:74:36:fc:63:44:b6:a6:e7:b6:c1:2e:
77:8f:f2:ef:23:22:06:a6:59:7d:2e:2e:db:72:76:
58:69:6e:40:8c:c9:90:70:49:e4:37:d0:fa:3b:8d:
04:85:0c:d4:14:1e:91:6b:b9:5e:a8:5a:22:3e:52:
e7:d8:24:d9:69:91:69:80:0a:35:16:71:88:8a:d6:
ae:ca:de:c8:90:c7:dc:ca:82:b6:c9:24:45:52:1f:
9f:58:21:8e:84:f0:2c:3c:5e:74:e2:dc:58:0e:da:
5e:7c:17:14:bc:08:46:64:68:a3:58:16:75:ee:19:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:8E:10:DA:12:02:96:6B:E2:4C:35:C2:7C:2C:FD:0D:DE:A8:B3
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5d:f1:42:45:8a:57:f0:7f:e2:3b:f6:4b:a5:23:d5:e6:4a:
8f:21:ee:8a:07:d9:c2:75:dc:d8:bc:4d:cd:2c:33:ba:03:a6:
68:db:5b:77:10:72:ea:29:47:5a:b5:fd:b4:d5:c1:cc:6a:bc:
ff:10:bb:63:df:2d:7b:bd:23:f4:dc:53:5b:2f:24:f8:8b:c1:
c1:6d:9b:24:74:85:8b:c4:5f:d4:d1:11:d8:f1:cf:e0:84:c5:
c6:0a:cd:04:2d:11:0a:a9:28:c8:6d:d7:f8:dc:46:93:db:1c:
bc:49:a8:47:79:f4:78:6c:de:bb:a8:68:c2:bf:8c:37:7d:51:
6c:80:68:3c:6a:d0:2e:c7:b4:93:2b:8b:57:ab:71:68:e5:1e:
d4:17:d3:a8:0c:2a:92:64:79:ca:8a:db:3a:3b:54:31:e7:b2:
bd:65:45:3b:f9:5f:d0:b3:06:0d:4b:d0:ee:a1:ac:d9:02:4b:
72:55:5f:78:da:c1:02:d2:70:4c:1a:3e:ce:98:a1:41:a2:48:
78:06:c4:92:f3:4a:c6:2d:68:28:24:50:e1:ba:a6:d9:90:53:
99:f4:38:3d:6e:40:18:b9:e8:0f:b9:07:88:de:e6:2d:a8:4e:
f4:ed:db:6a:b3:a9:50:ee:8c:60:c0:ab:2c:fc:a8:c7:c2:e3:
98:d2:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:10 2025 by rpki-client