Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: Yylp6OATuBL986JDeFLV1DHP8VUdBxGULmf74JApDRE=
Subject key identifier: 1B:CE:0A:9D:F7:2B:0A:86:CC:49:61:25:B0:BA:E3:DD:81:B0:F4:2B
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 0197711AFF3C67A2142D573D928BC62B3609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:01:24 +0000
Manifest this update: Sun 15 Jun 2025 01:01:24 +0000
Manifest next update: Mon 16 Jun 2025 01:01:24 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: FTFtS3Bc6/EwgagD+QDsomW4Z8LYjV8vebMN90zBtno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:ff:3c:67:a2:14:2d:57:3d:92:8b:c6:2b:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Jun 15 01:01:24 2025 GMT
Not After : Jun 16 01:01:24 2025 GMT
Subject: CN=1bce0a9df72b0a86cc496125b0bae3dd81b0f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:b7:f1:b6:1b:ab:50:4d:cd:6e:0b:d1:9f:
ed:30:df:53:d0:ae:50:43:87:48:3e:4a:41:32:26:
2c:bf:ab:5e:bf:07:fe:33:8a:c1:07:db:a7:b9:32:
fb:7a:71:21:8a:1f:af:97:69:6b:31:71:6c:aa:2f:
8d:4e:00:e4:b9:76:53:55:46:d9:b0:15:24:57:a0:
19:05:20:37:b8:67:1f:82:ec:4b:b1:54:e6:b2:e8:
e6:77:79:48:ac:dc:3a:7a:35:09:0f:5d:2d:4a:2b:
e2:f4:f3:72:90:a2:d7:d9:49:86:1f:e4:9c:46:14:
ef:de:b3:53:ef:1d:e4:47:2b:72:9c:ed:49:12:e4:
8a:d5:d0:04:53:0d:ff:5e:a0:d4:5b:bc:27:c1:5a:
8d:76:a1:f6:51:7a:69:9b:8e:06:8c:d4:5e:bc:8c:
f0:51:dc:af:1e:af:ef:2b:92:f6:bc:91:b4:dc:97:
75:0c:7d:4f:4a:a3:44:b7:e5:27:c3:7f:84:34:1a:
8d:c3:af:f6:d0:e7:46:7b:9d:b6:aa:a9:aa:46:f8:
90:73:22:22:a0:42:8e:37:a7:78:bd:e3:e5:dd:eb:
21:2c:49:09:65:0e:fb:39:aa:81:92:23:9a:d4:0f:
db:2f:f8:e7:04:8f:97:d1:89:ec:df:ff:d8:5c:1f:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:0A:9D:F7:2B:0A:86:CC:49:61:25:B0:BA:E3:DD:81:B0:F4:2B
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:89:b7:11:0c:f4:77:e4:73:af:18:78:43:11:0b:70:cb:
e6:7a:98:13:9d:20:ef:cc:dc:ed:2b:8c:47:98:40:55:92:0d:
6c:68:41:e3:d8:6f:ae:88:7f:c7:f6:a2:e6:41:85:cc:96:34:
97:47:ab:90:97:df:11:84:00:76:97:2c:5c:ef:6b:c1:57:b9:
9d:28:5a:4b:26:dc:3c:ca:bc:f1:7b:e9:2e:fa:22:00:76:c2:
c7:4c:cd:35:80:1a:45:81:7d:4a:7f:45:d6:75:0b:cf:76:0a:
57:83:04:7d:f6:e9:49:44:1d:4d:c1:4b:c8:59:81:0c:89:48:
44:df:f1:7b:1d:e2:7e:f8:7a:18:e2:40:18:fe:91:df:51:67:
82:2d:9d:fd:ab:9c:0f:47:02:85:9b:5c:1e:17:f7:24:3b:f5:
9d:86:7d:ec:cb:a0:ec:6c:ce:dd:13:f2:1b:14:0b:3f:5a:4b:
97:5e:b4:c9:21:45:40:87:e8:89:6f:f0:61:df:9e:49:22:5a:
8c:3f:7b:20:78:74:7c:e0:26:94:1b:a6:0f:ba:c9:2c:17:7a:
4e:91:85:55:51:41:60:90:45:97:2a:6a:7e:59:86:c5:bb:cf:
4b:1e:7a:07:16:92:d6:62:a9:a5:91:9f:c5:1e:1c:9e:3f:7e:
f1:81:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:08:32 2025 by rpki-client