Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: B+VdA/yVZAU5zbbc/FFMuXpD1gtT6l4FxcPB2BhtbWU=
Subject key identifier: 05:DD:8C:41:E6:B4:D6:C9:BE:86:23:6E:F0:9C:91:12:62:4C:97:49
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 0198D65FA7E13C582766C039A98E0C51C782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 09B4
Signing time: Sat 23 Aug 2025 10:00:49 +0000
Manifest this update: Sat 23 Aug 2025 10:00:49 +0000
Manifest next update: Sun 24 Aug 2025 10:00:49 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: CWhTGMd2VnIYkmT5X+CD0SCWxOK8mk8bwN5IfcsBaaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a7:e1:3c:58:27:66:c0:39:a9:8e:0c:51:c7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Aug 23 10:00:49 2025 GMT
Not After : Aug 24 10:00:49 2025 GMT
Subject: CN=05dd8c41e6b4d6c9be86236ef09c9112624c9749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:b9:5d:fa:14:54:d9:f7:cd:ab:ca:a4:ef:
7c:2f:56:88:69:59:4f:0b:9a:94:46:56:ff:af:42:
9b:c9:60:d8:53:28:08:4b:35:f2:5f:4b:38:fe:17:
14:55:02:1d:8f:86:e4:1c:06:1b:56:4a:84:c1:0a:
a2:73:24:53:95:04:6c:d6:b8:c2:52:55:1f:61:23:
3f:11:ae:9c:d7:d9:72:40:91:09:60:c2:d1:b3:dc:
c2:49:a8:9a:74:c1:fe:3d:06:0e:c8:30:37:67:f7:
1b:30:9d:4d:27:ae:0a:bd:39:eb:cb:86:bd:7a:0f:
ca:eb:b8:a5:e6:e0:37:8e:f7:64:dc:bf:87:c6:59:
60:39:75:35:0c:9a:5a:30:ee:ce:1e:e6:ad:9f:b8:
cf:1b:b5:29:cd:a6:ef:7a:d8:00:6c:4b:23:4b:38:
2a:05:53:1b:0f:ba:af:de:4a:00:20:a8:6d:c8:9d:
ff:40:fa:0c:8e:48:00:29:1c:03:d3:11:0d:f2:2f:
7a:87:4e:8b:40:07:fd:c8:e4:07:ab:d4:a9:cf:c2:
d6:1d:01:21:ce:ea:81:43:b3:6c:76:e4:a5:eb:ff:
e9:dd:8c:a6:8e:0c:c5:a1:b0:32:be:58:98:56:2f:
27:70:61:c8:b8:b8:99:65:36:eb:eb:88:47:af:d4:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:8C:41:E6:B4:D6:C9:BE:86:23:6E:F0:9C:91:12:62:4C:97:49
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:bf:aa:59:f2:b0:3f:b3:05:87:3b:68:5a:04:c7:83:63:
55:0b:04:ad:e6:4f:26:a8:82:8b:d9:4f:09:c5:8f:33:ed:92:
e3:15:e9:80:3c:aa:58:2a:e4:4c:8a:1d:cc:ec:7a:7b:02:48:
73:d8:c4:54:00:aa:83:07:f1:7d:8e:41:ec:a1:34:64:27:2a:
ab:3a:60:91:06:f0:72:4d:39:63:a8:6d:c4:75:0c:6a:b1:03:
ba:09:67:8d:d3:92:85:03:5f:87:67:d9:07:bb:d1:9a:1e:cf:
d6:ac:42:66:7d:66:7f:61:9e:7d:a2:b1:32:b3:8a:18:70:20:
c2:00:91:43:f1:5b:ea:87:f2:9c:69:47:e0:b4:84:f1:6d:fe:
26:f0:94:e4:54:52:e9:d5:9d:56:15:7e:b6:24:24:25:47:4c:
5b:e9:6f:70:57:c8:35:32:4a:89:8b:10:23:20:b3:96:20:3a:
65:de:24:48:77:76:88:c0:de:4b:14:47:f0:85:8b:3b:9e:b4:
27:da:93:d1:44:cd:2d:4d:bd:c7:6e:41:0d:d4:0d:2d:40:26:
28:d6:25:97:5a:95:72:46:2d:87:56:57:be:51:7a:8b:0f:47:
98:2c:04:e7:7f:ac:17:68:ac:37:03:f7:21:95:84:69:88:79:
b0:7a:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:32 2025 by rpki-client