Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: GvKRd3vvmWNHs7qUjkxqiJtKKjCY4YdDPjyle9KQlzE=
Subject key identifier: 26:00:95:04:42:EF:61:BE:A2:22:54:90:68:A3:6B:A1:B0:A6:C4:3E
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 0197B77C149C185F41410FA0BB22153BAC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 1121
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: ekiGSekuCIytPKfL99yqp+Jxc4biPcIW1SpF0kBO08E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:14:9c:18:5f:41:41:0f:a0:bb:22:15:3b:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=2600950442ef61bea222549068a36ba1b0a6c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:db:48:0f:ea:43:31:07:d5:e8:49:03:53:
33:bb:63:9c:49:78:c2:ae:a3:e4:36:d7:8c:ca:31:
58:e5:41:f4:fd:49:40:7d:da:90:6a:0e:2a:21:b1:
f9:40:80:cd:e4:98:35:aa:89:2b:f1:9a:ed:6a:23:
c9:1a:29:21:76:58:11:b7:39:5b:f7:36:ce:b0:d7:
0e:3f:db:b5:a4:87:9d:0e:d1:a1:32:c0:df:4a:97:
18:dc:21:18:6a:5f:a9:5e:dd:c6:88:e3:ee:4c:32:
aa:5e:cc:85:84:b1:d5:d9:39:03:15:66:10:f8:04:
14:b3:e5:fa:8b:ab:3a:37:fb:b6:66:fd:95:30:88:
f6:e4:d6:fa:d5:43:c6:f1:31:ff:d9:fb:8b:6e:cd:
91:c8:06:c5:e3:58:8d:a9:db:21:fd:56:24:c4:ed:
de:bf:96:83:e0:da:b4:18:41:8f:1d:de:90:9b:a9:
12:b1:0d:a8:50:fb:dd:c6:26:35:29:4b:26:64:22:
8a:03:aa:cd:f4:99:02:f5:41:b1:c4:92:82:7b:5c:
e0:e4:3f:88:26:df:f7:6a:aa:fd:9b:77:59:4d:1c:
87:4e:6a:eb:27:6e:80:b2:bd:82:6c:e0:f7:77:2e:
04:52:7b:5a:35:ca:44:07:b1:9c:06:ca:be:34:48:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:95:04:42:EF:61:BE:A2:22:54:90:68:A3:6B:A1:B0:A6:C4:3E
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:e1:f8:6c:a3:e8:fb:19:a9:c0:09:3f:fe:59:7b:65:c1:
0f:24:68:26:db:33:fc:b7:b2:a7:1b:21:85:65:d2:f4:f0:ef:
37:2e:6f:8f:90:08:89:d0:81:b8:36:57:26:d6:f5:e9:3a:82:
09:8c:4c:44:af:95:0e:72:99:d2:21:38:d5:be:27:52:01:88:
c8:19:6a:27:56:3d:d6:60:25:4d:35:f8:45:fd:c0:e9:68:da:
5a:f2:02:a4:d0:d5:84:dc:a2:79:37:f4:46:ab:e5:87:dd:8d:
42:d3:d1:1f:fb:c6:13:c8:02:08:d0:6e:01:1c:ae:e8:75:a7:
36:2c:71:04:29:1b:76:48:64:e6:ab:05:9c:d8:ed:ff:7a:ee:
a0:2c:a2:69:3e:40:05:fb:d2:c1:81:e3:8a:0f:50:20:9a:81:
c1:63:78:80:09:43:62:a7:4d:2e:f5:d5:25:73:43:28:dc:f2:
04:73:2a:3b:2e:e7:77:19:40:b5:18:0b:e7:94:af:14:ca:33:
6a:0d:b3:45:93:9d:21:e7:66:f4:5c:c2:f0:cd:26:c9:bc:30:
c7:0c:7b:71:1d:21:9b:a0:07:23:fc:a1:c0:9d:be:ce:84:79:
20:6c:86:68:50:89:0f:43:39:7a:5e:57:7f:14:ac:5e:85:e5:
91:eb:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:18 2025 by rpki-client