Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: 3kDRhPa83+Kkcb/0UeGz7ozNOYoG3mQhG6gxdLxbbKc=
Subject key identifier: 95:2F:05:32:A2:55:E3:58:29:BA:C1:E2:6D:98:F7:62:4E:A9:07:A9
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 01978320885CACA8922C0E5E4FB50A7CD0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 13:00:36 +0000
Manifest this update: Wed 18 Jun 2025 13:00:36 +0000
Manifest next update: Thu 19 Jun 2025 13:00:36 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: SuyG1gn0tX4QtcvXlPT/VItyVpLwJEwdRhEJp3xs9vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:88:5c:ac:a8:92:2c:0e:5e:4f:b5:0a:7c:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Jun 18 13:00:36 2025 GMT
Not After : Jun 19 13:00:36 2025 GMT
Subject: CN=952f0532a255e35829bac1e26d98f7624ea907a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:bc:e7:6e:8d:54:a9:2d:45:df:4a:3b:bb:
73:a9:2f:b7:1b:35:e7:66:f2:6b:44:d1:68:e8:1d:
d1:77:1a:f3:48:12:3c:3b:e7:90:b0:94:78:f8:4a:
aa:ea:f2:d9:55:a4:4c:9e:dc:95:9d:15:01:e8:a6:
83:89:33:bc:f8:37:a5:e6:d0:ea:a1:9d:fb:ef:a9:
48:e8:65:f2:b2:c9:b3:3d:c2:e4:ff:25:0d:fc:13:
56:be:a0:07:ed:23:01:86:25:31:4b:01:9e:46:c8:
4b:c2:4a:89:b4:32:99:af:cb:52:1f:cb:da:97:c6:
43:92:72:45:c7:8a:10:eb:40:0f:ae:d7:76:0d:bd:
23:dc:71:20:f0:14:eb:30:f9:3e:7e:c5:90:5e:ba:
7d:f8:f7:b6:db:0c:83:72:90:af:5b:c3:dc:3b:17:
bf:3b:ce:d2:2b:6c:a4:b6:0d:22:54:14:a0:c0:ea:
aa:0d:39:14:50:03:0e:e2:ef:b1:95:ba:79:b2:b0:
2d:36:6c:23:0d:59:0c:c2:0a:f7:54:3e:a8:57:71:
4f:6d:dd:e0:5c:21:cb:11:1d:e3:0d:4e:82:1d:c8:
0c:ae:6f:17:52:79:26:c2:79:4a:63:64:04:91:5e:
e9:fa:e7:97:c0:b1:4c:10:d9:5a:89:6a:63:df:40:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2F:05:32:A2:55:E3:58:29:BA:C1:E2:6D:98:F7:62:4E:A9:07:A9
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:c2:b8:10:4b:30:7c:b8:4a:55:58:4e:84:79:ce:d8:06:
17:e6:97:c4:ce:83:5a:3e:0e:25:3c:4a:06:0b:72:2d:11:b5:
ce:c1:bd:32:df:80:d3:84:82:02:cc:39:d5:28:a9:8b:11:c1:
81:4e:95:9f:29:45:85:96:e2:84:02:d6:60:22:e8:74:71:99:
bd:57:40:fb:e0:14:86:32:86:8b:09:70:36:f1:28:c8:52:c8:
bf:f7:38:0b:d1:5e:48:84:a5:cb:f2:0c:77:8c:7f:19:97:89:
1b:51:ea:da:f1:59:47:26:05:68:ad:26:db:1f:d5:13:a9:b4:
40:2d:ba:9a:7c:25:66:11:25:89:0e:1a:1d:bc:98:2a:d5:c0:
91:60:d2:1f:bc:aa:81:fc:ad:a2:9f:37:90:8c:60:08:15:c6:
9c:59:8f:a7:84:eb:52:8d:57:92:ce:66:78:72:8e:cd:84:05:
61:f6:0d:45:a9:83:d6:64:0b:47:19:6c:e4:8f:ca:64:45:1e:
72:7f:e7:43:31:74:d8:77:47:c5:02:18:b6:4d:06:66:b9:fc:
a2:1a:2a:b6:33:68:bc:97:52:e0:b9:85:fe:ac:11:f0:fb:77:
85:80:9a:61:b8:d3:ac:cf:b6:73:ca:89:9d:f9:96:2f:23:49:
e8:25:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:07:39 2025 by rpki-client