Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: XLyRvuqWDDjIdu+616XCC9TlxoPxOQ4x2bVNl1pQcKI=
Subject key identifier: 92:F7:B7:09:17:16:66:92:0C:5A:E4:54:15:DB:25:55:72:C3:71:1E
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 01976F2C7B2E1399C096107DC90DD7FC6185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 08AE
Signing time: Sat 14 Jun 2025 16:01:15 +0000
Manifest this update: Sat 14 Jun 2025 16:01:15 +0000
Manifest next update: Sun 15 Jun 2025 16:01:15 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: E3nEreMQ98HsA48f4Rsn/Xdvhx0uepaFIwVEypX2gYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:7b:2e:13:99:c0:96:10:7d:c9:0d:d7:fc:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Jun 14 16:01:15 2025 GMT
Not After : Jun 15 16:01:15 2025 GMT
Subject: CN=92f7b709171666920c5ae45415db255572c3711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:aa:c2:8d:62:3d:d4:d5:ce:5f:43:54:bb:
c4:b3:e8:ab:ac:72:e8:31:ce:08:c6:aa:d6:4d:fd:
f0:fe:97:1f:16:78:aa:13:90:c2:fb:59:96:c0:64:
db:1c:75:af:30:bb:e7:4c:09:18:7b:84:c9:92:af:
fe:de:9f:6f:93:25:77:2d:da:97:b9:34:4e:ed:26:
40:84:57:25:76:57:ab:1a:d4:01:78:89:ea:c6:4a:
ad:76:c5:ca:f7:0d:dc:35:9e:1e:8d:0a:a4:0f:f1:
d6:20:12:0b:b3:ca:3d:63:a4:40:f4:66:26:9d:19:
0b:de:29:48:5d:99:b1:09:19:32:51:c5:18:77:f0:
05:dd:68:ba:15:d7:9c:a1:92:14:dd:bb:47:13:fc:
6a:8b:87:6c:62:c7:98:12:78:9e:ef:b2:be:4c:56:
79:a3:c3:20:7b:61:32:05:5c:60:dc:f6:22:a2:a4:
b7:ce:85:a5:01:29:80:23:9a:f2:2c:eb:37:53:c1:
10:0c:c1:d5:df:1c:ba:0d:9a:01:fe:da:41:67:12:
f9:ce:23:2e:7b:4a:fd:b5:4b:2f:72:fc:87:3d:96:
07:ea:c8:77:04:69:43:87:4b:3c:2a:b4:90:96:6f:
93:12:ed:a1:cb:83:8e:6d:c9:dc:e6:a2:c6:41:d2:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:B7:09:17:16:66:92:0C:5A:E4:54:15:DB:25:55:72:C3:71:1E
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:b3:6d:44:ed:12:08:42:57:36:0d:6e:7e:2d:be:c1:72:
a8:65:99:a3:6f:2a:48:f9:96:d8:51:77:47:90:80:a6:bf:29:
72:2c:b1:14:13:9f:16:b8:7a:5c:12:a2:d7:98:ca:8f:66:64:
d5:32:76:40:b8:d9:07:29:d5:ef:38:7f:e3:b6:da:4b:c0:7f:
16:ea:9c:f6:fa:a9:1c:9f:38:21:0b:02:de:c6:01:b6:6e:5f:
69:e7:2d:74:e4:37:c8:fa:a4:78:af:3c:41:28:54:36:b9:78:
d4:6b:50:f5:2d:72:e1:50:0b:5e:ae:11:5a:ba:38:1c:97:33:
d1:30:cd:43:f8:6b:6c:b7:4c:d9:3c:6d:de:ef:ed:d7:07:7f:
de:09:7d:c1:a6:04:4b:2d:db:ff:02:6a:42:5d:b4:fc:29:14:
bf:82:63:0a:47:9e:dd:c5:53:bb:17:dd:10:78:a3:22:a4:9c:
70:a3:47:5f:7f:94:7a:3a:69:13:a0:5a:4b:9f:03:0a:e7:b3:
ae:c0:b9:21:80:a8:b2:4e:ab:ca:2b:58:b8:f3:bf:4d:aa:ea:
54:00:b6:49:01:11:ec:d3:3f:ce:25:48:10:f4:98:c9:81:ff:
11:5f:3d:18:54:70:1d:99:43:a4:7c:1e:13:00:49:cf:da:a7:
af:e3:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:50:26 2025 by rpki-client