Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: Q+nfBswtVtMUNulIjcPWJt6G0I9KeTo8AY55aIrMnLI=
Subject key identifier: DF:AA:1F:45:74:7E:62:8F:E9:86:68:8A:45:44:EE:8B:6C:F9:96:B2
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0197737648BAF53071351064106639B73666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0A08
Signing time: Sun 15 Jun 2025 12:00:20 +0000
Manifest this update: Sun 15 Jun 2025 12:00:20 +0000
Manifest next update: Mon 16 Jun 2025 12:00:20 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: xXGmEyO8F4xPST7b3oB1Ms8dwxiIT6hAelD/5D/ZTCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:48:ba:f5:30:71:35:10:64:10:66:39:b7:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Jun 15 12:00:20 2025 GMT
Not After : Jun 16 12:00:20 2025 GMT
Subject: CN=dfaa1f45747e628fe986688a4544ee8b6cf996b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:45:2b:ee:08:27:69:8a:0b:f1:c1:0f:d3:09:
e9:3c:22:ac:df:39:2e:b7:3a:de:bc:36:37:82:30:
c1:db:01:75:00:2d:de:18:41:e1:c4:6f:cf:00:15:
04:c5:17:36:ba:8f:f9:17:ac:2e:0a:d5:cb:4c:20:
be:bc:8e:cb:ab:ad:10:11:df:21:ea:e1:ea:0e:eb:
4a:cf:dd:67:cd:a5:e6:bc:8e:5f:a1:2b:b1:2d:fb:
33:a2:d8:ba:52:fc:5c:18:ee:75:74:7a:fc:6b:57:
3d:a6:fc:0a:d4:8b:01:ab:e4:f9:0c:68:83:f5:2e:
e4:b6:70:8b:5c:25:fa:d0:ab:03:a3:c0:30:b7:c5:
3b:78:77:02:44:b3:d5:9e:e6:87:6e:b8:aa:6e:d5:
4b:df:a0:97:38:79:24:db:6d:96:44:0b:80:4b:b4:
e5:37:29:47:e4:58:c7:e5:8f:89:3d:6c:e5:32:dc:
d2:ac:e7:36:ab:87:4a:f5:e6:b7:50:03:d5:ff:e8:
1d:49:6f:22:24:1c:71:08:7e:d4:53:fc:03:d5:b3:
76:cf:03:97:24:70:29:c5:43:5f:a1:83:59:e8:31:
ca:8f:c9:d7:53:19:5c:45:e3:8f:6a:79:44:83:25:
cc:f4:10:52:c9:87:9f:68:4f:19:1f:b1:73:d9:0b:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:1F:45:74:7E:62:8F:E9:86:68:8A:45:44:EE:8B:6C:F9:96:B2
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:66:19:95:8c:e7:c7:2a:76:a6:1f:6b:35:35:f8:b8:9f:fe:
9c:c5:e7:5b:6f:94:00:d5:0f:60:02:16:aa:6f:73:7e:fc:2e:
fa:f4:ec:65:f3:58:2f:48:d3:0c:a1:aa:bb:e8:00:40:7d:c1:
f6:80:d8:93:88:2f:8a:f6:69:78:38:b0:d9:80:c1:2c:ab:a9:
41:c4:dc:0f:5e:3f:1e:d3:a3:64:dc:1a:b9:d7:11:67:29:36:
6d:ba:7c:98:26:ce:9d:72:9f:63:e8:b7:50:ba:68:5f:5c:59:
42:31:19:fd:b3:3f:e7:ab:e3:3e:bc:41:1d:22:75:9c:9a:0d:
93:8f:28:21:e6:98:e7:7f:46:71:d7:7f:cb:b3:0f:1e:13:b2:
ce:ac:96:22:a6:20:90:c0:83:11:75:6c:10:35:1e:2c:e1:aa:
08:59:31:26:e3:5c:d3:14:1b:d7:d9:5d:d3:62:b6:bc:4d:12:
99:22:0e:f5:18:b1:df:59:71:48:6a:f9:47:e1:64:3c:ce:df:
78:2e:26:3a:38:8d:21:7e:db:f0:92:89:fc:7f:07:4d:8a:9d:
ee:b1:87:bc:d5:e5:e5:1e:30:85:3c:f5:e4:82:cf:37:1c:5f:
84:6a:ba:fc:f8:e9:56:13:f1:5b:7c:ac:9e:7d:1e:89:eb:ab:
15:ef:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:02 2025 by rpki-client