Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: QDG8pkQOA7XDXS0q/maE0LnFRvryWyRNe8yAeFfcFss=
Subject key identifier: AD:52:5B:BE:AA:E2:46:71:92:42:F7:00:F2:EA:79:59:DF:CA:49:C3
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 0197B6A1F51404DD5A3D7B40459F3B6D5EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 091F
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: dSiG5en1zs6ffvm5qzurYRbzAho/zn/UEySZffQaDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f5:14:04:dd:5a:3d:7b:40:45:9f:3b:6d:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=ad525bbeaae246719242f700f2ea7959dfca49c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:51:19:b3:4d:92:33:2c:dd:96:08:8b:ad:
70:36:5d:7a:a5:06:8d:b4:bf:8a:64:db:b8:b8:f2:
22:0d:a7:3e:6a:bf:0b:13:b8:07:bd:3c:c8:6e:18:
e9:7a:14:46:72:61:d7:cc:23:5b:b3:f2:0d:a8:33:
6e:53:81:57:76:9e:0e:fa:6f:55:42:8e:f7:bd:47:
f3:6e:33:ba:55:93:18:95:ea:13:92:53:72:4b:86:
e5:e3:a6:83:8c:96:69:33:2a:1f:ad:cf:b3:26:ba:
bf:89:d2:5c:69:a2:31:88:07:63:c3:aa:d8:d9:4b:
5e:8f:6f:5f:f7:e0:c1:de:d0:8c:08:a9:4e:08:01:
55:0a:b6:f2:d7:8a:d1:2d:f7:82:d4:02:9c:dd:2e:
1a:9e:95:75:2d:02:de:ab:da:74:80:40:6f:b8:ba:
cd:37:a6:25:9c:2f:23:36:12:e2:13:56:42:f7:1a:
e1:6f:b9:89:8f:7f:22:6e:94:bc:3a:fd:8e:0f:0c:
95:7d:9e:b2:5f:34:e5:1c:b6:e4:e4:6a:2d:c4:2e:
ee:e7:db:d1:a5:6d:8d:7b:92:74:72:82:48:9f:a2:
5c:27:7e:ea:67:2b:6e:99:69:76:65:9a:3e:ad:32:
0d:ed:19:c8:68:a1:0d:c7:fe:03:97:8b:6a:fe:61:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:5B:BE:AA:E2:46:71:92:42:F7:00:F2:EA:79:59:DF:CA:49:C3
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:30:7c:91:f9:15:43:09:4c:aa:96:a7:4f:64:12:7c:f2:0f:
68:f6:b8:a5:67:72:1a:56:c9:cd:30:1f:da:e2:49:7e:42:7b:
ad:89:d7:25:f0:8a:7c:ff:33:65:1f:05:9b:0f:ac:35:84:77:
b9:c8:a3:5b:dc:dd:f0:d6:ba:c5:3a:9a:e6:90:20:0f:e2:32:
25:3c:7b:e0:61:96:92:2d:10:7a:94:ba:96:62:76:98:95:c2:
f0:a3:a5:90:20:6a:fa:50:89:c8:4c:d5:e3:1d:56:51:54:3f:
b8:5a:a8:37:68:36:96:bb:0f:62:b9:e4:9f:e1:3f:d5:d9:0e:
27:99:32:6d:77:be:79:4b:40:23:ec:7b:70:a6:03:88:c9:69:
e9:4f:b4:82:ac:0c:19:4a:5e:33:63:28:dd:ae:6e:06:83:ef:
d1:28:ed:87:14:c4:02:94:87:36:6d:54:1e:05:13:d8:fa:0a:
39:e9:24:16:1a:63:e4:b6:01:93:0f:19:c0:40:f8:82:e5:cf:
d8:92:e0:e1:3e:7f:a4:90:e0:13:dc:df:1e:36:dc:ed:f1:af:
25:53:d6:0e:28:17:1f:08:22:0d:54:4e:00:0b:8c:2b:e7:c4:
24:5e:24:14:16:47:e6:72:14:5a:b9:8e:56:ab:2d:17:ac:85:
aa:06:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:11 2025 by rpki-client