Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: no4ho7dqeWFfYmO6vy9iKAnYU43iGDknK3xv3V5hkcY=
Subject key identifier: D4:34:F0:B6:10:61:F8:3A:C7:E6:91:82:FD:19:2D:BC:CD:30:0E:F9
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 0197759BFF19ECD1A3FEC1B001ED4D0820A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 0485
Signing time: Sun 15 Jun 2025 22:00:47 +0000
Manifest this update: Sun 15 Jun 2025 22:00:47 +0000
Manifest next update: Mon 16 Jun 2025 22:00:47 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: miGwtE6ktczzblDKagSkWTTM6AUZHM415p+CKpv+v44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9b:ff:19:ec:d1:a3:fe:c1:b0:01:ed:4d:08:20:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Jun 15 22:00:47 2025 GMT
Not After : Jun 16 22:00:47 2025 GMT
Subject: CN=d434f0b61061f83ac7e69182fd192dbccd300ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:0e:bc:ea:a1:8a:27:18:79:91:d6:02:3c:
ec:a7:84:4a:f3:52:a1:b3:11:d0:2c:2f:72:42:70:
1f:4e:7e:1c:fa:1d:30:50:6e:10:f1:bd:20:b3:31:
40:da:51:f0:fc:19:b7:ff:77:31:01:72:01:fa:0a:
b8:40:ae:28:e4:88:0e:07:75:70:83:d6:04:26:34:
ce:13:9b:52:6a:00:fd:5a:5f:31:23:de:3c:13:2c:
40:ca:6d:10:2b:9b:e8:ba:a7:f4:53:89:9a:f1:30:
5c:8c:25:cd:dd:01:61:72:ce:ba:29:e1:51:e4:11:
4a:81:00:06:69:46:12:4c:24:e3:80:2b:a8:05:82:
95:d9:36:e0:9f:9e:2d:a3:db:f5:b0:c7:e8:78:6c:
89:5b:d6:7c:02:cd:77:32:1a:c4:57:cf:4b:b1:68:
7b:cb:6c:e1:0b:30:ef:06:b5:72:e7:53:9a:06:44:
f0:59:e3:b3:63:50:54:e0:c9:8b:47:cc:34:c9:aa:
8b:9e:05:7c:90:3a:0b:20:c1:e9:13:58:e0:02:38:
01:08:b5:e2:bf:43:3c:28:12:74:8f:94:12:7f:91:
5b:2d:06:28:49:27:3d:59:8f:1a:04:c4:60:ed:a6:
93:3b:8b:4a:67:94:ef:6f:c2:06:53:92:87:2a:05:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:F0:B6:10:61:F8:3A:C7:E6:91:82:FD:19:2D:BC:CD:30:0E:F9
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:fa:97:72:56:31:1b:d3:18:b6:e5:c9:40:0b:9c:75:c8:
6a:70:c1:eb:57:74:c5:7b:1d:c6:e3:36:36:85:cd:9f:ab:fe:
53:f5:6d:e7:39:3d:d0:2b:00:19:15:ce:25:2f:cd:64:48:0a:
90:26:eb:c2:5f:08:f8:c4:a2:cb:64:53:c0:68:93:f2:92:12:
1c:20:31:76:ad:8e:c1:d8:a1:78:a1:7c:bb:e2:ce:97:df:01:
7d:96:8a:de:6f:21:e1:26:a9:71:d4:cf:89:9a:b7:3b:59:9d:
21:40:be:66:51:da:14:fc:8a:1a:bf:ce:80:a8:a5:ec:e2:43:
5a:30:be:c8:02:b4:90:6e:f3:c7:3c:c9:88:eb:4f:28:1e:27:
e0:ef:89:34:f9:0c:bd:12:3d:73:50:e1:66:cf:60:30:83:ce:
a3:35:cb:54:01:a0:29:ed:fc:f0:99:d9:ac:9a:1e:1c:bf:74:
d7:c9:99:37:82:c0:5e:df:99:92:35:fa:e2:9b:b7:b2:19:d4:
ea:6f:74:d6:5f:f4:1c:69:f3:c5:a1:43:a5:37:a9:14:73:94:
96:88:2a:85:8e:64:73:1f:f6:03:0f:ee:f7:2e:f0:57:d1:ff:
fe:50:19:75:c7:a7:95:a2:fa:32:42:7d:99:7b:c7:7d:1e:82:
45:b1:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:36:07 2025 by rpki-client