
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: chh6K+MRXWAZqLl0KhecGPO9fNtkhPB9wUSC/2fVhow=
Subject key identifier: FF:BA:78:9B:32:5E:F2:D4:34:F6:27:4B:AD:C1:60:5F:6D:D6:12:03
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 019873E3525FED03D0C26CEBA56A890D61BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 0E7F
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: A0FbMxxJ3uQGuCU3D5HnBrOPqK6nHecEk02YrowGw88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:52:5f:ed:03:d0:c2:6c:eb:a5:6a:89:0d:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=ffba789b325ef2d434f6274badc1605f6dd61203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:d1:8d:0b:56:9b:62:ee:5a:ea:eb:09:29:
1b:00:d5:02:57:ef:84:37:c2:30:3d:fb:cf:c7:6f:
30:19:98:85:58:90:79:c6:30:47:fd:53:2c:dc:ab:
8e:9d:7a:55:ac:35:32:6f:e2:a4:7e:4e:d4:6a:d8:
8d:c0:a1:76:4c:44:ed:b7:e1:86:d7:66:87:b6:c3:
3f:45:f4:96:7f:63:e7:32:4c:be:87:f2:6e:25:b3:
21:1a:3d:26:19:22:02:6f:23:67:bf:be:95:3e:15:
8c:8c:2f:23:a2:b1:ca:7d:39:6a:01:b2:dc:7b:be:
15:31:74:27:54:14:65:7a:42:00:67:66:00:5b:4d:
17:ff:38:fc:53:fb:48:20:3d:d0:57:a8:16:04:7b:
c5:e4:02:0a:46:d9:6a:da:c4:9a:c2:fd:7c:3d:46:
42:52:b4:59:db:0e:67:74:33:71:f5:7d:c0:4d:5a:
b9:0b:03:b9:93:e1:fd:0a:f4:00:93:4c:d9:38:eb:
0c:44:bc:da:f4:87:4e:be:aa:ff:1d:8e:ea:76:de:
1d:55:4c:c4:64:04:1e:79:a5:37:0f:7b:5f:58:bc:
f1:0a:d3:c0:33:a2:d8:bb:36:da:e8:ad:f4:02:2d:
7a:e0:4f:a4:fc:77:78:90:4e:4f:53:26:f8:40:e4:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BA:78:9B:32:5E:F2:D4:34:F6:27:4B:AD:C1:60:5F:6D:D6:12:03
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:d0:dd:67:cf:df:4e:41:44:c7:10:10:cb:21:e2:0b:64:
48:f2:a6:7b:6f:b1:ff:24:28:85:3d:ea:7f:a7:cb:7b:c1:96:
36:cb:96:6a:f3:81:9e:83:79:4a:d2:fd:9d:35:55:df:89:7a:
15:7a:b5:5b:09:04:9c:22:3c:5c:40:48:65:c7:9c:0d:15:f7:
bd:94:58:db:f0:87:a4:f5:c7:bb:59:e8:c7:63:af:90:eb:59:
9e:bd:61:de:71:f7:70:fa:2d:4b:a7:91:84:9d:e7:c0:fc:36:
96:03:c4:a6:1e:a4:da:20:32:2b:87:da:3c:b1:01:9d:e0:ee:
e8:5b:a0:3a:62:72:ee:d0:96:62:61:84:7f:8a:70:a3:e0:22:
b5:89:0f:de:70:94:d0:02:14:02:8e:e9:48:d0:fa:e1:b5:e0:
b5:3f:cf:e5:eb:ac:1b:20:04:44:16:19:83:74:80:68:ed:6d:
7a:f6:c8:40:66:ba:30:eb:61:b4:10:af:d5:f1:d2:3f:62:13:
34:68:08:30:6a:ec:f6:39:d6:f3:af:23:28:47:61:21:36:34:
8d:cc:f0:f9:ee:1b:15:0a:b2:0d:6e:a9:e7:98:20:ed:7b:45:
54:2f:53:b8:3d:e5:f6:d2:90:b9:7d:1d:c0:72:f8:db:22:d2:
35:c1:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:19 2025 by rpki-client