Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: htxmri/rtwYFCHVSJgtcJItVnn1TUZFSU4rLNQrqQwU=
Subject key identifier: 15:3A:74:DD:54:7B:16:B5:A6:DF:B8:C4:F5:B5:80:A3:AC:7C:BA:57
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 0197696133C05681BE9AE74EAD513F302D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 032D
Signing time: Fri 13 Jun 2025 13:01:07 +0000
Manifest this update: Fri 13 Jun 2025 13:01:07 +0000
Manifest next update: Sat 14 Jun 2025 13:01:07 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: 9yu4dWtg6hsC1onXgvPlvtl2OfBN68tJ7pUlnhqCK3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:33:c0:56:81:be:9a:e7:4e:ad:51:3f:30:2d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Jun 13 13:01:07 2025 GMT
Not After : Jun 14 13:01:07 2025 GMT
Subject: CN=153a74dd547b16b5a6dfb8c4f5b580a3ac7cba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:06:a0:5c:85:7d:d8:f9:40:41:9c:fa:24:
f2:04:2a:53:81:c2:70:12:3f:9c:b4:f2:58:32:1f:
06:af:67:a5:14:4e:86:65:50:85:e3:d1:a4:c0:56:
5f:e5:3a:12:5e:47:8b:87:63:cc:fe:24:4e:a2:bf:
d2:b7:2c:4e:64:96:13:24:51:a6:cf:84:e2:c2:6f:
03:fb:e4:7d:ac:cf:67:39:fd:04:ee:31:a6:44:fd:
43:59:36:27:cc:15:b5:fd:a6:03:8d:d5:6c:1f:bf:
c3:53:55:be:63:cf:ab:b6:d0:0c:47:bf:62:04:7a:
63:82:8d:e2:0c:f1:9a:4b:8f:d7:60:65:5f:ad:f2:
80:4f:a8:a1:99:16:28:28:9d:d9:99:b8:46:39:51:
29:c3:78:68:68:ef:f8:98:5d:e3:7f:0f:47:35:e3:
37:12:43:34:57:55:6b:2c:9b:15:94:12:a3:8c:69:
9c:a5:5f:7a:68:f1:b9:d9:c1:b4:02:5d:e6:c7:f0:
8d:ea:82:3d:14:59:0b:69:57:5c:83:11:00:07:25:
19:79:a3:2e:cf:a7:d0:d0:ac:0d:47:c1:f2:cd:dc:
cb:e5:7c:8d:a9:b4:7f:f4:35:f8:96:1b:6d:93:65:
ee:32:74:d2:99:4b:3e:b9:db:e3:25:05:ce:38:8a:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:74:DD:54:7B:16:B5:A6:DF:B8:C4:F5:B5:80:A3:AC:7C:BA:57
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:4c:8e:e6:8a:2b:ec:78:8d:fb:ab:48:52:2d:9d:f6:1e:
2b:80:ab:f5:b1:8a:f2:8f:c1:a4:33:bc:4f:cf:47:7d:c8:ef:
b8:24:d3:9c:57:16:c9:89:6f:b3:53:3c:1b:f2:cb:23:3a:37:
7f:33:67:4a:38:1a:0b:04:2b:4c:66:13:36:61:89:40:ff:9c:
fb:58:dc:fe:f5:7c:ab:72:bc:ac:84:bc:89:64:67:96:91:27:
d6:f2:2b:9a:b2:e0:ec:43:13:0f:a5:45:23:31:14:3f:4a:cf:
bf:51:11:03:f0:c6:83:c1:df:79:01:d8:26:d9:ff:a4:f3:89:
fd:1d:98:d3:74:31:4d:46:6f:ee:c1:8e:6d:8e:b6:f6:e1:02:
74:c0:07:bf:3c:4b:d3:d7:c1:cd:41:67:c1:32:e2:3b:b3:c3:
09:fc:01:d6:4c:04:b6:11:b5:50:b5:36:9e:5e:69:bb:d7:39:
09:12:b7:26:6c:62:f6:3d:b3:b3:24:8c:0e:62:e9:95:53:b7:
ce:79:1c:ea:b1:e9:db:b2:ef:8a:aa:2d:1d:58:a0:ea:d9:80:
5a:50:4d:16:65:8a:a1:b2:02:10:b8:b7:14:5a:ad:62:9c:d2:
94:59:60:ec:3f:30:99:92:a5:ce:56:92:e6:60:2b:b8:8f:18:
4a:61:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:39 2025 by rpki-client