Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: OmZT5+4zuMGEepTAt6qQlIHM3L6aMjjEYLZJaSQJmRs=
Subject key identifier: 80:0B:94:28:77:48:D3:F2:68:99:AA:34:21:9B:F7:96:27:F7:79:12
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 0197B5FC4B49D4A8B1CD83E999388AD29564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 10:01:39 +0000
Manifest this update: Sat 28 Jun 2025 10:01:39 +0000
Manifest next update: Sun 29 Jun 2025 10:01:39 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: WWz576fNyWqMUtObLdgUGExGfJtLRjPm17+L3tIerfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4b:49:d4:a8:b1:cd:83:e9:99:38:8a:d2:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Jun 28 10:01:39 2025 GMT
Not After : Jun 29 10:01:39 2025 GMT
Subject: CN=800b94287748d3f26899aa34219bf79627f77912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:ae:c3:61:e7:f2:48:29:78:cd:90:69:ac:
0f:25:85:8b:65:79:ad:52:85:f3:f4:53:ad:be:ac:
10:52:d8:67:05:28:30:27:f3:41:af:72:c8:de:54:
fb:4a:0f:97:e9:9b:b2:d5:e0:b9:20:1c:5e:fa:32:
5f:55:bc:7f:21:69:3a:1c:79:23:8f:5a:a3:8b:32:
47:5f:70:81:ec:06:25:3c:f0:46:15:cb:8a:cc:24:
1d:1c:a4:82:34:d4:27:14:38:3d:27:7e:35:1e:ab:
10:ea:7a:f7:a0:36:b3:fc:1c:5e:68:55:f5:21:c0:
92:18:d4:95:2c:1b:e2:47:83:3b:bc:d2:e5:67:5c:
81:ee:15:0d:53:be:ba:ae:22:37:40:f2:10:dc:4b:
91:3b:0d:20:bf:1f:8c:3f:7d:02:d0:b3:b6:8d:4d:
41:52:27:ad:b3:49:58:5b:6e:10:29:be:bc:db:15:
5b:ac:69:55:2d:69:71:03:c8:b0:82:73:93:be:c6:
05:66:aa:85:d4:d8:14:88:72:a9:95:3f:52:a8:71:
42:82:68:3a:de:1c:40:80:ac:b3:17:1d:10:c8:58:
1c:f5:41:9d:dc:aa:15:ce:00:98:4b:89:3a:ac:2c:
40:f5:46:01:1b:2e:c4:21:00:d3:7e:b0:da:c5:f1:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0B:94:28:77:48:D3:F2:68:99:AA:34:21:9B:F7:96:27:F7:79:12
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b4:3b:b6:9a:ea:a4:ae:62:c4:ab:72:6f:43:8f:c6:d8:7e:
3c:e2:89:ae:f0:b4:30:92:ad:69:4d:99:5b:84:ee:c4:fb:b6:
b8:1c:17:f9:63:44:5c:46:f7:d7:95:19:64:2a:f1:9f:85:eb:
33:aa:3a:00:98:76:b7:bf:57:6f:c4:c2:50:2a:61:8f:27:28:
50:02:fd:4b:07:27:4a:4f:29:39:a4:01:f9:b4:e8:0c:7f:ec:
0c:82:1a:93:07:3f:2a:89:08:69:bb:2b:0a:0e:ae:0c:1b:33:
62:32:c1:74:a5:ab:cc:0f:89:11:66:a6:e4:28:d1:09:ca:8e:
fe:97:b3:0c:6e:81:89:8b:c5:c5:18:48:1f:29:ef:9a:b5:62:
60:c7:6e:fe:77:54:7c:09:86:c2:53:5f:9b:ab:a5:80:af:67:
22:55:74:88:c7:2b:fa:a4:ec:0d:3f:31:20:ed:c2:a0:ad:bf:
20:8e:f9:fb:cb:d5:71:9d:aa:28:24:a4:2d:b7:df:d0:10:98:
16:d9:f0:62:6a:91:a5:48:52:9d:ec:e7:ef:72:12:aa:d7:fb:
69:32:14:cc:53:10:d0:c5:52:c0:7e:b8:8c:d1:70:ad:d6:57:
98:75:c6:a5:d6:3f:2f:56:c0:1b:ad:6f:82:4b:58:21:28:f5:
26:9d:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:58 2025 by rpki-client