Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: q5zJlYfmg24N81FweksWnRrLbDoAmOOSOfwqUpuEack=
Subject key identifier: B4:03:81:45:E9:7F:EC:FD:26:77:53:F3:44:BE:4A:02:52:3C:40:CC
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 01976D3DB517B7B6BF0BC6DB1BD225472308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 110D
Signing time: Sat 14 Jun 2025 07:00:49 +0000
Manifest this update: Sat 14 Jun 2025 07:00:49 +0000
Manifest next update: Sun 15 Jun 2025 07:00:49 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: UrUB7LWxqz6B5RQ5MNgd3jMb4syaz+J3zD63ykHCdIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b5:17:b7:b6:bf:0b:c6:db:1b:d2:25:47:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Jun 14 07:00:49 2025 GMT
Not After : Jun 15 07:00:49 2025 GMT
Subject: CN=b4038145e97fecfd267753f344be4a02523c40cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:73:c2:6f:7d:b6:bb:80:35:71:11:f4:f5:
60:c0:e5:8a:23:60:82:e5:75:0c:21:00:7d:a1:59:
f5:93:32:76:75:06:1b:61:09:cd:64:2e:72:eb:ce:
d3:ab:f7:2e:54:3f:f0:95:d5:1e:c6:fc:58:1c:fd:
4e:33:99:2f:52:7f:ad:5e:78:38:db:30:56:b1:6b:
ef:02:16:51:2c:9d:90:4b:96:bc:8f:04:c7:cd:d2:
c0:03:47:e7:36:ff:8e:0e:bb:5a:26:57:18:2e:d1:
ba:09:58:d5:42:d4:1e:9e:d7:2a:5a:b0:2d:10:db:
73:c0:63:5a:7f:b1:4b:c1:d6:e0:f0:ff:7c:c2:3d:
86:cd:f1:51:74:7c:01:96:45:cd:70:a2:0c:12:3d:
cd:1b:2f:7d:f3:3d:35:52:16:6f:94:c3:62:82:1b:
79:9f:cb:af:61:09:95:99:b7:20:60:db:45:39:9d:
2e:ea:8f:b8:96:98:97:b5:ab:e9:23:28:c5:c3:c3:
68:67:ae:ef:2d:c4:d7:03:71:39:f1:e5:8c:1a:e6:
28:8b:4c:e6:1d:dc:e6:89:ee:d3:e6:94:7e:cd:a1:
99:a7:87:5d:bd:21:28:b8:8b:c3:55:bd:ab:db:d2:
50:f3:71:7f:10:16:67:f7:64:f0:3c:b1:a8:ea:12:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:81:45:E9:7F:EC:FD:26:77:53:F3:44:BE:4A:02:52:3C:40:CC
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6b:2e:23:fe:33:8f:75:c7:0f:76:02:28:de:f7:3e:c7:b3:
23:20:e4:35:73:91:df:d5:ff:6f:af:c1:25:83:d1:61:9c:27:
82:b6:df:7c:56:5e:c5:b6:65:b6:7d:e6:cf:93:d4:de:ea:f4:
54:b0:30:e3:b3:89:6d:8d:db:51:5b:16:9a:35:e8:95:9f:60:
be:d1:c2:dc:9a:0a:cf:e0:07:50:cb:e4:d5:63:b3:71:c6:ec:
ce:fe:0b:79:72:c5:5a:b1:94:2b:8e:4d:f9:fd:29:fe:5f:75:
2c:60:a6:3b:27:e2:26:2b:2f:b1:b4:c4:0a:ca:34:51:79:a0:
16:b6:7f:34:36:ee:5a:9c:ec:85:e8:bc:a3:8e:50:d3:52:86:
1b:a8:17:c7:7b:27:cb:43:b0:0a:26:73:27:f7:e7:d1:fa:44:
ba:a9:c8:13:17:a3:5a:31:3c:01:18:03:f8:4a:d4:c7:66:e0:
8f:47:3d:ec:4b:73:3b:00:37:66:05:96:cc:07:3f:b5:f9:91:
2a:37:cc:79:76:15:02:df:33:76:6a:f1:e8:28:99:f8:c7:93:
5a:8e:60:bb:92:b9:48:83:72:32:34:18:14:c7:d8:c4:07:88:
3b:08:56:3c:28:6c:83:9a:d1:1d:1e:48:6e:cb:43:92:46:19:
c0:91:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:10 2025 by rpki-client