Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: XH+OWBmJLNXQUv6NdPr7abkk77SrqAtvX1Q/pJq0DtM=
Subject key identifier: EE:BF:76:26:7A:B8:42:62:34:A4:A2:17:2C:BB:7D:FD:C9:58:3F:E2
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 0197B7EA29D108AAE35AA317D186511CEBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: oNwkJ3bZhM1SorK/UUZWu3BwIi1WdCrYJcQdqRo36i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:29:d1:08:aa:e3:5a:a3:17:d1:86:51:1c:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=eebf76267ab8426234a4a2172cbb7dfdc9583fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:42:e9:f0:4d:9d:0b:16:2b:8d:0b:14:3e:
cd:67:2b:09:05:c5:0b:15:20:71:63:f6:dd:37:13:
ab:a2:b6:46:e9:f9:92:c3:f5:c2:ae:b5:45:94:e6:
d6:6d:e7:8c:6a:98:a5:92:91:c5:b4:71:2c:28:53:
d8:76:fd:80:d7:7f:1a:43:dd:12:a6:76:71:67:3a:
91:46:60:92:9a:7e:d4:e4:6b:d2:f8:e8:12:5c:ce:
7e:29:0e:6d:22:8f:50:20:86:0b:c8:bc:87:53:15:
4a:eb:cf:c9:e4:24:8b:5b:99:86:f9:9d:76:76:ac:
bf:07:3f:cf:17:ac:4f:2c:f8:1c:6b:49:db:0e:7f:
47:cd:7f:22:6f:47:ce:f9:aa:e5:2e:28:57:24:0d:
8e:7b:20:d0:9f:43:da:3b:d4:e8:12:fe:21:73:cb:
62:e8:53:9d:f1:a8:77:bd:ca:15:08:f0:8f:e9:0d:
ac:38:8e:a8:7a:cd:ba:8c:a5:8c:cc:34:d2:f4:a4:
2c:49:b2:4b:5d:d6:7a:60:27:50:b4:5f:8b:16:06:
41:4c:ef:e1:e3:51:47:a1:d2:56:63:54:f6:45:2f:
52:3f:c0:cd:9c:86:c7:93:e7:25:4b:59:21:dc:46:
13:5c:83:e5:d5:de:b9:a2:59:64:01:6b:cb:a6:ec:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:76:26:7A:B8:42:62:34:A4:A2:17:2C:BB:7D:FD:C9:58:3F:E2
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:44:ac:21:9e:32:4f:db:f7:f5:ff:21:e5:2e:1d:4a:6a:
52:b2:bc:a7:48:50:91:9f:d2:71:70:a5:aa:62:63:ea:2c:fe:
23:ab:0b:71:1f:46:2e:42:76:1f:a4:53:9d:34:cc:fa:f9:46:
c4:2c:ff:50:fe:a0:09:cf:43:5e:20:62:9f:7b:8d:e8:af:81:
32:6d:ee:0c:fb:42:ed:6e:df:91:40:8b:8b:a8:ec:86:6e:85:
8e:2b:5d:7f:73:88:e8:43:0b:24:b3:ee:21:e5:ce:69:1a:f7:
41:38:d1:f5:75:3c:d9:fe:1f:4f:69:1f:52:48:d2:72:63:d6:
e3:9d:9b:e6:8b:0c:1e:96:0c:12:da:8f:fb:21:3b:05:43:a0:
7c:8f:91:8e:4f:69:5d:58:95:da:63:ce:37:a3:c2:fb:e1:ab:
3e:09:35:71:00:62:16:a1:ca:70:c8:60:e5:8b:ac:28:ab:7f:
dd:2c:76:f1:13:f7:73:10:be:cc:53:da:84:51:9f:62:9e:f6:
c0:d0:d7:e4:34:53:fc:07:a0:e4:fb:a0:dd:77:04:27:62:cf:
18:18:ec:2d:59:49:66:88:27:83:95:10:06:97:b0:2b:5a:e8:
4e:c2:df:14:61:3d:3f:04:21:44:90:f0:4c:7c:a5:88:e4:3f:
b7:c8:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:20 2025 by rpki-client