Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: lFn9BmGglhNPtMepmzlUmtQb7FbJc7KLKc0+KFZ7zR8=
Subject key identifier: 8B:41:AE:8F:EB:A9:C7:24:D2:2B:6A:DC:77:B3:52:12:C3:2A:3B:6C
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 0197B9D9278036A327F8834B54BDEFAB2DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 0FE7
Signing time: Sun 29 Jun 2025 04:01:45 +0000
Manifest this update: Sun 29 Jun 2025 04:01:45 +0000
Manifest next update: Mon 30 Jun 2025 04:01:45 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: P5xdX1l+fLkNVxD5dWawtcJqkEi2pyGLfs5FjRhRBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:27:80:36:a3:27:f8:83:4b:54:bd:ef:ab:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Jun 29 04:01:45 2025 GMT
Not After : Jun 30 04:01:45 2025 GMT
Subject: CN=8b41ae8feba9c724d22b6adc77b35212c32a3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:75:e9:9e:73:54:87:bd:10:7b:07:c0:c7:
ec:3e:a7:54:60:77:a5:25:b0:ea:0f:19:48:33:98:
0f:98:f7:f2:2d:fb:c0:c8:c1:10:1e:2c:3f:62:3c:
bd:bf:41:83:71:d8:e6:0a:a6:c9:6a:a6:0c:a5:46:
93:0e:1b:b9:a2:35:02:2d:a8:9a:8e:ed:ce:37:43:
10:d1:69:10:8e:12:6d:0b:e4:c4:02:77:66:a1:f4:
c5:d6:99:91:38:07:9e:d1:2b:a9:45:8b:88:86:5b:
a3:d3:f6:c9:f4:e1:5d:45:69:e5:dc:e6:dc:7e:ac:
9e:b2:be:e0:35:73:2c:ca:6b:50:b5:ab:2f:d0:40:
99:5b:d0:e4:d9:49:ce:79:9c:21:68:ae:d7:03:3a:
2d:93:de:ea:4d:a3:1e:22:84:bd:f3:b1:61:dc:4b:
2f:e1:fe:28:3e:55:67:b2:61:ba:70:f6:c4:37:13:
6b:ae:05:a8:7e:7b:b7:2e:6f:1b:9a:07:1f:f3:93:
68:7d:55:6f:16:5b:44:3a:e5:3e:57:40:27:b6:3a:
1f:af:44:e9:77:27:6c:2a:81:c3:6e:25:8e:05:de:
12:20:ad:3a:1b:d0:70:06:6b:79:13:17:c0:a3:7c:
f8:04:7c:d7:76:15:51:42:ef:e3:a7:85:83:61:db:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:AE:8F:EB:A9:C7:24:D2:2B:6A:DC:77:B3:52:12:C3:2A:3B:6C
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:83:aa:5f:df:6f:38:81:68:99:60:1c:8a:25:c2:b2:4a:
bd:01:a0:c3:b9:11:f7:78:c7:e2:bf:f8:19:04:ea:9c:ad:85:
6a:24:93:25:2e:e3:f0:dd:95:b9:a1:02:cb:19:9b:fd:f5:c3:
18:18:3b:1f:54:ca:ea:cb:38:2e:09:45:e3:67:d8:de:12:f9:
35:75:e7:7b:cb:ed:fc:53:9b:48:4f:d4:e8:f6:cc:1b:07:cf:
22:b5:c1:cc:3b:08:d0:56:40:05:33:53:f4:e9:d4:a1:82:c7:
a9:04:f4:1a:d5:d5:01:70:d2:c5:1d:f6:bc:1f:6e:b2:4e:19:
ff:52:ef:64:f2:48:0f:25:31:6b:36:38:d3:f4:dc:ee:fa:e5:
57:78:ad:65:6c:f4:24:c9:57:ee:f4:c5:cc:b6:f3:86:23:53:
fa:73:a7:98:74:5d:86:0c:0a:71:08:80:cc:14:d9:f0:45:f7:
5a:c0:26:1e:f8:15:75:cb:1c:cb:9c:04:f7:91:b0:13:1e:86:
48:9b:78:fb:56:a7:63:83:b4:27:1c:00:f1:8d:3c:9c:ab:82:
65:c5:a4:07:10:62:3a:ca:c6:b5:51:9c:8b:b1:6f:d5:2c:6f:
de:4d:8e:9f:7c:d2:13:e3:31:f5:06:5f:19:50:a9:b2:cb:d1:
d9:cb:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:04:24 2025 by rpki-client