Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: JaXYy4nUrS5maVSyKwt5yG4VceGXxuBMY1EjMRspECg=
Subject key identifier: 12:D9:20:38:84:E8:33:70:02:8F:E6:A3:FB:19:BE:DD:73:D5:44:93
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 01976D3DD756086C50B2FFB8C7FA97694007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0DFD
Signing time: Sat 14 Jun 2025 07:00:58 +0000
Manifest this update: Sat 14 Jun 2025 07:00:58 +0000
Manifest next update: Sun 15 Jun 2025 07:00:58 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: SBOAMu9eRIaovckQBdB0n/74dZsXA0jRLRt5705nQXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d7:56:08:6c:50:b2:ff:b8:c7:fa:97:69:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Jun 14 07:00:58 2025 GMT
Not After : Jun 15 07:00:58 2025 GMT
Subject: CN=12d9203884e83370028fe6a3fb19bedd73d54493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:a3:5e:7a:ef:e1:61:d3:ae:12:08:b8:34:
aa:73:80:1f:22:48:cb:36:90:57:d5:02:fa:8d:e3:
6e:13:cd:2f:00:4e:b5:bd:d1:a6:25:bf:a6:d9:c6:
52:c6:c6:d9:b5:1c:64:02:be:ff:af:97:de:23:3f:
54:f4:a5:fe:a1:c1:ed:2e:29:49:06:f2:bb:18:47:
1b:33:fd:94:58:15:18:11:cd:d0:c0:6d:3b:a5:33:
95:5e:76:35:bc:e0:40:a8:37:00:8d:87:9b:9a:00:
6c:04:0e:a1:b4:c0:a7:ce:76:9c:99:82:27:bf:19:
7a:56:fb:de:95:53:74:62:62:0a:c4:6e:c1:1e:f3:
f2:9e:94:a7:19:b6:3f:ee:6a:30:e8:dd:42:43:71:
6d:e7:a6:87:05:96:70:df:5e:31:3a:4e:98:3f:05:
50:82:e5:56:3b:84:6c:8c:0c:57:da:78:95:93:34:
39:09:41:fc:55:f6:a9:ff:48:69:ef:d6:06:81:8d:
3f:d1:d8:8a:48:b2:63:60:3e:f3:46:3b:a9:a0:d2:
2d:67:39:b5:b8:28:97:28:eb:d0:74:eb:38:e1:f6:
50:69:d9:66:07:87:c5:fa:b8:6e:51:ab:ca:cf:65:
ad:27:9d:9c:37:65:5a:c1:9d:3a:3e:b3:f4:8d:2b:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:20:38:84:E8:33:70:02:8F:E6:A3:FB:19:BE:DD:73:D5:44:93
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2e:9a:35:0b:b2:1d:77:d2:fb:1a:3b:90:6a:59:17:ee:4f:
f6:8d:de:98:48:cb:93:31:d4:86:fb:06:17:34:69:f1:0d:03:
f8:18:6f:fb:93:44:07:23:2a:44:55:40:a1:44:e7:4d:77:0a:
cb:be:17:f9:8b:07:14:69:d2:c7:1c:a1:30:e1:f3:c7:4f:91:
56:6d:6c:22:83:7a:6f:74:f3:b1:fc:a0:62:c1:3d:75:16:9b:
2a:d3:b4:1d:79:5f:1d:6e:f1:18:16:ba:b2:df:55:56:67:25:
b5:4f:51:c6:1f:bc:ae:f6:3a:07:cc:bc:d4:c8:3c:cf:cf:48:
be:bd:f5:c8:a8:cf:b2:c4:ee:e1:4b:67:a4:ad:16:24:e8:8e:
8d:fe:c9:68:5d:ce:9a:08:13:ae:e5:9c:62:67:8d:1a:d7:10:
83:80:0b:2c:aa:e2:35:ca:40:f5:0a:62:c2:76:be:1c:0c:48:
ec:ef:56:0f:6f:16:a6:ef:62:bd:d7:32:dc:ac:a7:8f:79:07:
c3:39:00:3e:1f:4f:d2:8f:8f:bc:ce:38:79:13:ed:7f:be:d4:
36:92:cd:3a:cc:38:82:af:3b:24:df:8b:ce:97:10:64:19:2f:
d5:8c:1a:6b:f2:c4:65:f6:30:eb:db:85:2f:d1:40:95:3a:c8:
fa:41:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:31 2025 by rpki-client