Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: kYI0U3u7/iqQFvaUtd9PotlK0tmJv889CkaExRJt38g=
Subject key identifier: 92:D2:BD:2C:3C:DB:8F:EB:8F:3F:7B:3A:AE:39:AB:00:9D:A9:F4:1D
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019872989838953FF7BF03DB1235A9E822B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 13B8
Signing time: Mon 04 Aug 2025 01:00:59 +0000
Manifest this update: Mon 04 Aug 2025 01:00:59 +0000
Manifest next update: Tue 05 Aug 2025 01:00:59 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 0rcRS7po0JjFIuvjyyMD8sQAGFqJ+Go8jnHjxuL3yr8=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:98:38:95:3f:f7:bf:03:db:12:35:a9:e8:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Aug 4 01:00:59 2025 GMT
Not After : Aug 5 01:00:59 2025 GMT
Subject: CN=92d2bd2c3cdb8feb8f3f7b3aae39ab009da9f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:7c:8c:a2:ea:60:f5:89:63:46:df:29:08:
48:6a:da:2c:5a:ee:75:4e:cb:15:ae:14:10:57:f9:
a5:d6:9d:7c:e2:84:51:21:0c:5c:a9:18:d2:ec:11:
c7:e4:48:e5:d3:f3:bc:24:86:e7:c9:bd:8b:55:c7:
87:b8:64:2b:b4:ba:42:af:a9:7f:78:15:4e:99:4b:
2f:69:9b:3b:94:e1:bd:99:29:11:f9:45:ce:8b:6a:
28:85:09:4f:23:6c:b4:d6:34:65:2a:f2:78:d0:a2:
bd:ad:24:02:c3:2f:61:32:00:33:d3:6d:1b:69:8e:
f0:a7:8f:15:3d:e6:8a:5a:66:d0:5d:aa:2d:e9:54:
c4:d8:ef:11:b1:bf:c2:3a:53:53:22:ad:66:f1:a8:
23:9f:76:c3:e9:8b:b9:58:34:6b:b3:f6:b9:27:24:
2f:7b:6e:7b:64:08:10:bf:9a:aa:ed:64:03:c2:76:
ed:43:a8:0a:b6:16:e4:61:74:d7:c7:c8:61:59:fc:
07:f3:53:c9:0d:69:80:60:bc:9f:ac:97:58:63:d3:
62:66:23:c0:09:e7:31:c7:8b:56:4a:56:a2:fa:09:
8a:17:e7:b8:be:e4:7a:f0:c3:9b:9c:e3:d2:6a:b2:
97:d7:78:15:a2:73:89:48:e2:51:70:5d:c7:b1:1c:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:BD:2C:3C:DB:8F:EB:8F:3F:7B:3A:AE:39:AB:00:9D:A9:F4:1D
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:56:d4:08:b3:61:39:2b:d7:95:8f:e2:33:0f:bc:fe:87:64:
e7:26:ec:2e:75:40:88:86:06:f9:4a:df:c4:2c:cc:f8:dc:8e:
89:b4:a4:b9:98:3b:19:14:73:76:82:e7:27:20:2f:aa:8b:af:
d0:25:94:f4:f9:d2:bf:11:85:18:bf:35:e7:a7:b4:0f:cb:d8:
38:fb:8d:49:54:4e:7e:12:b8:b7:49:5b:65:e8:7b:73:f5:1f:
6a:91:b8:40:8b:e6:b4:45:e1:6a:54:b2:ce:99:1c:6e:cd:78:
1b:90:81:37:d5:e9:ca:ee:ec:f3:b6:e4:11:b6:ed:8c:83:a3:
c0:57:2b:84:2b:b5:28:15:14:b3:cb:38:df:c9:88:9f:49:86:
8d:38:ef:4c:5f:a9:11:cc:9f:f0:38:c7:62:53:fd:59:0e:8c:
23:ef:e1:0e:13:6d:b7:14:f0:06:fe:f2:b7:c6:7c:50:a6:73:
32:28:68:a8:0d:5c:4d:17:8b:70:07:0c:ae:6c:8c:54:7d:d5:
1f:f6:a8:a0:1c:9e:73:11:ba:c1:3d:86:dc:21:eb:09:e9:1e:
1f:a3:41:88:24:3a:a9:40:05:08:94:f8:12:cf:93:c8:69:cd:
1c:41:e4:d9:c3:e5:e1:c2:9f:a7:c6:9a:7d:ef:d1:6a:7e:96:
2d:eb:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:50 2025 by rpki-client