Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: drFAn+tYcQs2HkHtsbaCW8BpCZJ12aD7lOSFOCWoS9k=
Subject key identifier: 22:5B:BB:5E:09:AB:1C:58:72:90:F4:9D:27:DF:45:D6:1C:74:76:0A
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 019769CEFDD41E6C1A44E0A808432830AAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0C06
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: NIz1AM6FH+eiLsud/Z309CMhG+bvGJJ06pAxyh2OWu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:fd:d4:1e:6c:1a:44:e0:a8:08:43:28:30:aa:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=225bbb5e09ab1c587290f49d27df45d61c74760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:6d:ae:f1:16:ac:90:a0:6d:1e:1a:7a:aa:
34:62:42:7b:ce:b8:37:4e:a2:b8:4e:f4:2c:fd:55:
f0:82:27:2a:f5:ae:a8:2e:ff:27:36:8d:3c:c4:c8:
d8:3a:22:6c:d6:27:76:9c:ee:f9:1d:16:6f:94:b4:
ae:dd:51:04:a6:72:4d:9e:d7:32:b9:f3:0d:d9:c4:
4d:3f:c5:2d:62:4c:ac:83:4e:1b:38:b3:4d:72:1a:
29:d3:65:f5:d7:b7:5f:f4:f7:f8:ae:50:c2:f2:09:
56:93:b8:c1:5e:b5:c9:e8:08:03:26:70:7f:3e:66:
59:03:01:6b:71:96:07:75:25:03:ef:1e:4a:ac:9b:
c0:cc:45:83:76:60:00:96:2a:a2:e9:1e:f7:0f:6c:
80:3a:cf:68:36:a4:80:42:67:12:06:4f:c4:80:f1:
dd:f2:64:4a:e8:ff:a9:85:a7:b6:cd:f0:52:91:d0:
55:58:58:71:24:a7:a6:ef:38:ab:c2:e6:6c:2b:ff:
2c:88:2e:e6:ea:dc:2c:06:c7:f0:f9:b1:87:7e:8d:
37:d9:a8:8e:87:12:b3:d4:e9:44:16:23:95:9d:ac:
70:59:03:fd:db:b8:ba:58:35:72:b4:0f:ba:14:80:
9f:56:4c:a6:c9:ad:78:9b:98:45:9f:5c:d3:f9:dc:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:BB:5E:09:AB:1C:58:72:90:F4:9D:27:DF:45:D6:1C:74:76:0A
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:89:10:d3:23:b2:47:9c:7e:e5:58:92:50:67:64:04:01:
61:c7:a5:e6:64:85:35:81:78:b9:40:bf:4e:59:26:ff:8f:be:
35:ff:d3:ad:d5:c0:10:22:40:17:3f:16:70:c2:fd:fa:f9:28:
a4:32:a4:4a:00:3f:81:66:24:2f:04:64:00:07:7b:33:4d:47:
ce:98:55:8f:7c:c3:87:35:d4:db:47:06:52:4a:2e:28:e0:0e:
32:36:ff:46:7b:a4:2d:84:3e:8d:b1:33:a4:19:06:f5:18:c5:
2d:d3:27:59:f9:88:37:95:19:15:f4:f2:ad:0b:be:dd:38:9d:
b1:5b:b4:c2:e7:e4:22:8c:03:ce:fd:a0:16:73:33:1d:c5:04:
ac:ef:9f:b3:44:cd:37:30:54:ca:9d:69:6d:53:1b:2a:11:7a:
bc:32:d3:41:d5:a4:2a:1c:83:ce:b2:12:bd:db:c2:57:a6:98:
35:c0:23:f1:ce:e9:2b:25:36:00:3e:b4:63:d4:54:61:81:fc:
84:e1:14:9b:f6:1b:b9:73:ca:f6:66:cd:29:9b:dd:7c:41:87:
65:63:c1:43:1e:9c:6e:6e:bd:59:c6:49:9d:4d:ed:04:00:e6:
3c:66:11:d9:1c:c2:99:79:01:07:fa:3b:b7:81:fc:42:e6:3b:
f4:05:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:25 2025 by rpki-client