Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: cB+tWOVHgGKKhqcYD0eoi6KtHVrQUXIVT0UdTC1LqAQ=
Subject key identifier: A9:13:A8:3D:DB:A3:BE:CF:82:FA:CE:F0:6E:3A:3A:C3:A8:AB:E2:02
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 01988DA1C8413D6CA7076932A51489841579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 07:00:46 +0000
Manifest this update: Sat 09 Aug 2025 07:00:46 +0000
Manifest next update: Sun 10 Aug 2025 07:00:46 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: i6PgeaKQ6QyLU3lpEqNC6u0Mb3uIyjpUgxNKTc2wzQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:c8:41:3d:6c:a7:07:69:32:a5:14:89:84:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Aug 9 07:00:46 2025 GMT
Not After : Aug 10 07:00:46 2025 GMT
Subject: CN=a913a83ddba3becf82facef06e3a3ac3a8abe202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:f6:84:1b:42:c7:5e:42:65:a0:4a:41:0e:
f5:8e:f2:8e:dd:70:43:df:75:83:1a:fe:94:0f:1b:
ea:f2:b3:7a:04:cb:0b:08:21:79:ee:cf:1c:4c:78:
9f:c7:2f:0a:89:25:d5:5c:c9:9f:f1:6a:8e:b3:ab:
a7:59:03:35:f1:d9:ff:40:0c:c2:0c:e5:a6:fa:26:
82:f3:c4:c7:07:1f:c4:4a:35:83:20:48:fd:11:77:
25:2f:66:ff:13:21:48:1b:43:66:2a:ff:ab:f2:86:
0b:31:90:ce:12:55:14:44:97:c4:bd:01:39:4a:43:
4e:59:f2:9f:b4:f3:a3:60:1d:c7:aa:7b:eb:b9:65:
ed:b3:f3:fd:18:e3:83:2b:28:21:07:f2:de:f8:a7:
45:62:70:d3:bf:6f:82:43:4c:3c:c2:a7:cb:c8:31:
44:39:d2:66:1a:a0:05:aa:ee:1a:5d:5d:f5:54:e2:
a2:29:15:4b:b0:3a:99:72:ed:8b:86:c8:15:be:af:
e6:8d:23:8e:12:e3:dd:c2:f2:61:c1:fa:dd:6d:20:
ef:b4:72:6a:a5:df:a3:d1:b4:5c:b6:82:a9:70:89:
60:b6:84:08:a7:2a:e6:63:d9:dd:1b:78:31:ee:81:
18:78:02:dc:8c:75:b0:10:5b:44:94:f4:5f:4d:ad:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:A8:3D:DB:A3:BE:CF:82:FA:CE:F0:6E:3A:3A:C3:A8:AB:E2:02
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:db:ad:43:5d:4b:fe:e6:ff:97:cd:be:86:88:38:6d:56:
05:7f:f0:e9:66:55:fd:56:f0:42:9e:52:ab:5a:fb:53:2a:b1:
93:4a:0d:8e:b9:f8:53:bb:a2:80:92:a0:39:45:9f:eb:5b:2f:
db:12:cd:07:82:43:1e:da:79:c8:61:3f:42:d5:f5:40:d4:ed:
6c:b0:a0:fa:85:2c:0d:c4:a9:b5:9f:3e:03:81:28:d8:98:0a:
57:3c:90:c9:2d:06:a4:b3:d8:c0:b7:35:12:29:c4:07:c6:4f:
cf:54:62:de:d7:df:68:4a:43:7f:30:4d:7e:bd:3f:1d:22:33:
ce:f1:c1:81:82:aa:aa:12:eb:24:52:11:c0:90:72:72:05:4e:
6c:e5:eb:57:51:5a:f3:c2:e4:eb:23:2a:2f:87:13:f9:df:39:
13:2b:ee:a2:c4:56:05:49:bb:e8:e4:37:ed:e3:46:66:1b:e2:
cb:ca:79:86:2c:0e:08:f3:b1:22:7a:6c:48:46:86:5c:43:a8:
dd:6b:53:bf:05:ce:25:04:07:0a:83:31:d0:d4:78:be:ac:5f:
80:8a:8b:50:13:2f:22:b8:35:4d:dc:57:00:31:a0:c9:55:07:
56:2f:46:1d:7d:f8:22:de:2e:a1:c5:0f:7e:19:81:6e:d9:8d:
41:f8:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:59 2025 by rpki-client