Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: GAg27CPm7HGd6MoehYOoMU0g4adUt/IGxOkOqXHFhfY=
Subject key identifier: CB:10:3C:FC:39:09:DB:2C:FF:24:9A:4A:09:C6:B7:65:50:8B:75:FC
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019769611C3EDAB6FB4DDAD5033D3C8EFBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:01 +0000
Manifest this update: Fri 13 Jun 2025 13:01:01 +0000
Manifest next update: Sat 14 Jun 2025 13:01:01 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: 9Mfv079maMU+UwbxCgZHTPvq7FW8+qNHhWEsc9/Q0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:1c:3e:da:b6:fb:4d:da:d5:03:3d:3c:8e:fb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Jun 13 13:01:01 2025 GMT
Not After : Jun 14 13:01:01 2025 GMT
Subject: CN=cb103cfc3909db2cff249a4a09c6b765508b75fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:73:57:06:69:0a:f4:da:1c:ec:03:38:d7:
a6:76:92:b3:d3:c2:6f:01:89:76:9c:ff:58:02:f8:
ed:09:a1:cf:49:0c:b1:47:70:fa:9a:8e:d0:c3:6b:
f7:76:1d:f7:af:3f:dc:14:f6:67:ee:d9:a3:f4:ae:
51:ed:44:9d:8f:0c:b7:eb:c1:f7:c9:4b:4d:18:c7:
21:c2:35:4c:ea:01:c5:00:8e:e8:e7:e4:18:7e:e7:
70:5e:3e:3d:c7:d9:85:b8:53:2c:24:dd:52:af:c3:
c6:fc:1c:81:46:b3:c8:76:72:43:1b:d3:c1:b0:0b:
9c:1b:e3:8d:a8:f5:f0:5e:e4:86:a6:7e:0e:f5:bd:
f1:53:9e:0f:98:1d:13:ea:41:a2:7c:5b:65:a3:23:
42:7c:c1:22:6f:f9:6c:13:09:2e:45:8c:22:9f:ff:
e2:e4:96:b7:65:85:88:bd:67:f4:4e:e7:f5:ec:b8:
32:82:3a:63:5b:22:d0:88:6f:a0:42:b6:85:d1:2f:
c3:ac:28:cb:96:8e:8d:6d:0c:3e:4e:a6:70:4f:79:
fd:60:c2:a1:5f:bd:ab:1c:a9:84:b5:5b:46:09:ac:
d1:4b:44:d7:6a:3f:55:ac:39:b4:0f:88:cb:b4:b4:
82:a5:f5:7d:f0:35:29:9c:bd:6e:ca:07:6c:98:ca:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:10:3C:FC:39:09:DB:2C:FF:24:9A:4A:09:C6:B7:65:50:8B:75:FC
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:a1:c2:4e:4e:25:22:f8:af:c5:4a:8d:4c:31:26:60:8b:
9f:3d:5e:e2:42:82:49:26:68:80:e9:c6:87:0b:6e:f0:f4:d8:
27:c9:1f:0b:5d:50:f9:71:3c:b1:f2:99:1c:9b:d2:e4:81:4d:
8f:40:48:21:a4:8e:96:76:01:bc:b2:6d:c6:16:c8:90:3d:90:
97:0c:b0:4b:66:ab:ad:e5:9a:97:7e:50:27:87:ff:a1:8f:ac:
b8:9a:85:ef:79:48:65:56:c4:3f:b1:1d:7a:5e:e0:bd:ad:c2:
29:bb:5d:21:eb:cd:24:79:6c:9e:ac:7b:87:8a:2f:ab:21:ad:
bc:fc:92:c1:23:bf:45:17:55:0a:b4:3f:21:89:eb:65:63:3a:
82:95:c8:a8:3a:8c:07:93:6a:8d:f1:5b:ab:04:8a:99:27:96:
44:8e:c7:cd:78:93:c3:32:3f:59:eb:a4:27:d4:c8:99:aa:e6:
ce:4f:59:60:3d:fb:3e:8d:09:1b:d8:4e:e3:af:64:86:db:42:
de:11:95:c8:9f:59:1d:c3:23:92:40:14:2e:68:c0:c3:ed:cf:
1a:7c:56:44:b1:1a:eb:28:ee:66:91:2b:b3:a8:df:5f:1e:98:
9b:3b:0c:42:ed:c9:de:ae:5a:76:34:39:ac:59:f1:29:e9:ff:
68:dc:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:42 2025 by rpki-client