Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: z3h4QDAwwBPNKrP67stcHTyX77nUvoTii734FldszNk=
Subject key identifier: CE:40:BB:78:44:ED:E3:B7:F4:ED:4B:04:82:3A:ED:03:D4:09:A0:A4
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 01977AC2EFBFD848D4B6BCDE345F758B88E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 11B2
Signing time: Mon 16 Jun 2025 22:01:25 +0000
Manifest this update: Mon 16 Jun 2025 22:01:25 +0000
Manifest next update: Tue 17 Jun 2025 22:01:25 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: DBCNBA7Rd8Q+Rs7fmbXxEA7LsV0HH1b+vsMywgeK8EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:ef:bf:d8:48:d4:b6:bc:de:34:5f:75:8b:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Jun 16 22:01:25 2025 GMT
Not After : Jun 17 22:01:25 2025 GMT
Subject: CN=ce40bb7844ede3b7f4ed4b04823aed03d409a0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:fb:a6:35:7a:65:41:02:2d:c1:8e:51:fd:
be:0d:63:70:2d:fe:47:f7:b7:71:cc:42:80:17:3a:
96:86:c7:77:af:61:12:85:6b:a3:ef:3b:83:7a:03:
e7:67:1d:83:fe:a1:f2:fc:d1:23:a6:a3:cb:6c:1c:
0e:70:bd:91:51:27:9a:5f:20:b3:7d:74:40:2d:c8:
ce:a4:f0:5f:d4:5b:f0:33:87:79:a2:2f:36:80:46:
3c:3a:4a:fd:a3:65:4c:a6:d5:a8:b4:17:58:2b:da:
5c:3e:06:df:04:59:29:96:ae:48:61:1e:9d:e6:8a:
10:54:70:66:b5:55:92:17:f1:f0:95:a9:32:08:29:
ba:b3:06:1d:3b:be:e8:f3:0c:5b:84:1d:37:a2:2a:
89:b0:79:74:44:21:f5:0f:7c:ba:97:6c:f3:41:33:
d6:cb:7e:12:ae:2c:92:fc:04:d7:e1:17:d4:e0:39:
d9:4f:10:1f:e9:9d:ab:4d:09:4b:e5:ab:04:39:c3:
43:77:6c:1b:ee:28:f6:44:78:9e:8e:89:9e:4c:2c:
0a:62:ec:25:f4:bb:95:7a:7c:40:dd:5a:5c:c7:2f:
cd:03:96:fb:cf:a2:57:e9:a2:7f:58:5f:fb:c8:89:
27:79:a1:64:c3:3c:f3:ed:b7:92:94:ef:11:b9:81:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:BB:78:44:ED:E3:B7:F4:ED:4B:04:82:3A:ED:03:D4:09:A0:A4
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ef:c2:64:55:ba:08:9e:97:bc:3f:97:4e:b7:c4:46:6e:24:
5c:59:6e:d3:b4:fd:60:2c:01:6f:d4:0c:f4:de:a0:89:79:2a:
e8:77:7a:f3:42:fe:bf:8c:99:a4:14:c8:6a:d1:be:0b:0e:c5:
84:0e:c1:b2:3b:ec:fd:97:93:31:d6:45:cd:40:c2:f9:be:f8:
eb:93:3e:a0:a8:5f:8b:c0:52:66:86:e5:92:ce:ed:de:c1:05:
43:f3:d0:87:d2:02:67:e0:44:17:e1:78:a4:ef:2c:79:f9:19:
74:7f:d6:b9:02:ea:71:29:fc:cd:68:c9:de:f5:44:f2:c0:99:
94:0f:0d:81:01:99:51:b0:6f:d9:32:4a:01:a3:f1:60:ec:08:
21:11:11:46:7b:d3:d8:64:a7:fb:2c:d8:90:44:c5:e3:58:86:
16:9a:51:5d:c2:12:ef:f1:21:08:3c:11:c4:1d:30:50:2f:36:
1b:bf:3e:88:1c:a5:a6:85:5e:4f:bb:a1:84:78:f0:19:42:32:
c9:75:c3:9b:78:a5:fc:a3:52:c1:c6:e7:cc:6f:56:4f:52:8b:
73:57:d4:0c:59:a0:62:29:7d:2a:a1:72:ca:5a:b3:b9:57:46:
ef:0c:d1:08:ed:e2:82:8b:a8:e5:9b:5d:8d:0d:3d:fa:87:ae:
34:f0:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:10:58 2025 by rpki-client