Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
File: mAO6qFdULHWMJI0xHmOX_OSDgBo.mft (raw, json)
Hash identifier: bmssNGFPgH4VliSnhsvdWNHelzvfrBqSYJ7+JqQf8U4=
Subject key identifier: 94:3E:6B:59:AF:18:27:A8:B4:F1:49:66:AF:7F:56:71:82:A4:8D:33
Authority key identifier: 98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
Certificate issuer: /CN=9803baa857542c758c248d311e6397fce483801a
Certificate serial: 019768852E63C668DA49D34A2255298761DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
Manifest number: 64
Signing time: Fri 13 Jun 2025 09:00:47 +0000
Manifest this update: Fri 13 Jun 2025 09:00:47 +0000
Manifest next update: Sat 14 Jun 2025 09:00:47 +0000
Files and hashes: 1: mAO6qFdULHWMJI0xHmOX_OSDgBo.crl (hash: DPZWR2r+71/zXv+6Ww0Kv3dk2mxgMikeek8lx+V4XSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:2e:63:c6:68:da:49:d3:4a:22:55:29:87:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803baa857542c758c248d311e6397fce483801a
Validity
Not Before: Jun 13 09:00:47 2025 GMT
Not After : Jun 14 09:00:47 2025 GMT
Subject: CN=943e6b59af1827a8b4f14966af7f567182a48d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:f8:1d:6b:05:a5:67:23:3c:f9:88:25:9d:
78:e9:9a:f5:d9:45:8d:11:d5:a9:89:32:95:dd:d9:
52:a4:ee:e4:8f:08:f8:b2:a2:54:e1:8f:0c:c1:f8:
bb:a8:91:af:7d:e1:09:05:cc:22:84:c0:ae:26:80:
a0:4d:39:41:e0:bf:a3:da:6d:2c:43:b1:ae:19:54:
79:7f:91:da:b4:9a:75:f2:c8:0e:d4:bc:0f:6d:6d:
63:8d:21:2a:06:8a:4a:fd:22:c0:b7:56:99:c4:8e:
c5:ea:7e:4f:25:fa:5a:47:40:2d:f5:8b:7a:7a:d9:
63:85:e5:58:2b:42:18:64:e8:61:ce:dd:5c:69:93:
2c:68:76:72:2a:98:e1:b6:5f:b4:43:05:cc:f9:9d:
6b:9c:5d:fc:64:8b:37:68:5d:9b:ff:c4:3b:e2:56:
c6:5e:5f:a8:1e:df:fc:27:6f:99:30:40:85:a6:3d:
72:ae:c3:38:9f:e4:e9:94:c1:d9:00:8a:1c:13:7b:
97:de:8a:c4:a5:c2:05:fd:b7:06:44:2e:ba:1d:a3:
eb:7f:18:a9:07:4b:e8:28:48:55:d6:49:cd:03:0a:
ad:db:6b:f7:ad:50:2e:cf:7a:5e:f9:70:23:f1:e6:
b3:df:92:86:6c:13:8c:da:0a:d5:e1:a2:fe:0d:3e:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:6B:59:AF:18:27:A8:B4:F1:49:66:AF:7F:56:71:82:A4:8D:33
X509v3 Authority Key Identifier:
keyid:98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:d9:67:be:bc:49:ea:40:09:46:0e:2e:69:26:53:f1:62:
d0:08:93:58:11:a4:59:b9:44:ec:03:97:3d:17:d9:05:b0:6d:
34:fd:3b:81:de:60:ca:b1:08:9a:81:e2:79:5d:b9:0c:79:cf:
9b:56:fd:f5:f3:7c:8a:72:2e:cc:aa:fa:bc:09:e9:b0:3a:19:
e7:50:5b:3f:b8:e5:f2:ee:4b:27:71:9f:51:5a:1c:7f:3e:df:
38:98:5d:50:9c:53:9d:c7:f4:85:05:f2:4a:c4:a7:c1:d8:72:
45:6b:6b:46:84:a3:41:cd:a0:db:7e:a3:6a:d1:ae:f1:39:e4:
8f:ba:46:35:81:ba:ec:fe:41:ed:80:2b:e4:68:3a:55:43:eb:
93:b1:ef:2d:f4:b4:68:13:09:94:0e:1b:44:3e:f9:fa:ff:c1:
63:e2:ff:51:7c:07:a2:93:fc:83:1f:18:61:15:98:93:ee:42:
11:13:7f:98:8a:56:8b:4b:47:56:20:b6:c3:6a:d9:58:68:8f:
a7:89:fd:1d:6c:f2:00:10:a9:67:93:12:29:f7:da:39:bf:a5:
15:27:69:a3:67:28:54:e4:62:2f:0c:f5:4e:52:36:e0:f6:94:
37:a8:1c:cd:00:b8:0a:a2:8b:ef:6a:0b:4f:b0:c2:d7:95:fd:
be:2f:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:43 2025 by rpki-client