Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: miL66ZTDFybI1zHTqmcTyjT3/i/PzzNmswq8KV6rjZU=
Subject key identifier: 72:55:1C:F8:05:E7:B1:48:C7:55:FB:A7:20:BA:E4:F3:78:41:AF:8F
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 019873E29225352787178A371D893BE1AE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 0981
Signing time: Mon 04 Aug 2025 07:01:24 +0000
Manifest this update: Mon 04 Aug 2025 07:01:24 +0000
Manifest next update: Tue 05 Aug 2025 07:01:24 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: Gx+EgS6QBXug/dNuySNmkY1PflxbN+GwVY9VoOgP6KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:92:25:35:27:87:17:8a:37:1d:89:3b:e1:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Aug 4 07:01:24 2025 GMT
Not After : Aug 5 07:01:24 2025 GMT
Subject: CN=72551cf805e7b148c755fba720bae4f37841af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:30:08:59:33:a9:a4:22:69:71:cb:f9:1b:
f8:7d:ad:06:5e:13:71:9c:07:ca:6d:66:09:c9:5b:
6b:8e:38:85:5d:fa:27:29:4c:bc:04:dd:ab:9d:8c:
40:73:7b:ac:7d:76:7f:8c:f7:a3:9e:9e:cb:a5:30:
9d:01:a5:be:e1:83:22:3f:2f:f4:51:09:8f:bb:35:
ea:ed:60:11:ff:6e:60:0b:55:3d:7d:a2:02:00:92:
1d:75:7d:24:af:f4:2e:b1:87:e9:1e:e4:a4:6b:c3:
c2:31:a2:ed:15:a0:82:b1:2a:e4:b2:2a:4c:42:13:
40:7e:38:2f:43:b5:13:5c:ce:2a:a8:c5:b3:40:f3:
6a:11:2c:2b:2c:08:7e:81:36:b2:49:b6:1f:f7:03:
f5:1b:ad:34:74:68:cf:b3:53:0a:8a:e5:99:16:eb:
42:4e:bd:d6:e9:87:ff:0e:60:f1:31:c6:38:a7:4c:
a4:cf:5b:07:f0:1b:1c:88:13:48:d5:33:ed:c4:47:
50:16:92:33:ff:e2:b3:f9:8d:28:15:ec:99:8b:77:
1b:3f:7a:a5:92:09:21:07:46:d1:4b:e7:d7:e3:64:
3c:b2:1c:f0:b0:d6:0c:b7:69:fb:20:f9:90:e2:87:
d6:c9:99:ad:c0:cd:21:bd:01:13:8d:de:a3:0a:8b:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:1C:F8:05:E7:B1:48:C7:55:FB:A7:20:BA:E4:F3:78:41:AF:8F
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:3c:b2:b7:b0:ff:e8:9c:a5:95:d5:a9:7d:45:62:c3:d3:
1b:57:50:89:70:5b:2c:4f:77:f6:c4:b1:16:bd:2e:5a:20:66:
64:78:47:d1:50:80:86:d5:0b:29:c5:b7:cc:ee:7b:4b:2c:d8:
37:1d:15:e3:6b:16:44:2e:a0:c5:ff:30:ad:ad:4d:17:66:91:
1a:8f:06:8f:ca:39:6f:77:84:0d:6c:3a:10:48:40:26:c3:80:
a7:0c:a1:93:de:96:c7:90:de:f5:e4:40:f4:34:e1:85:39:ac:
da:67:87:54:70:ea:43:0a:25:f5:9d:54:b4:c0:22:c6:92:17:
bd:dd:c6:3d:e4:b7:fd:46:ee:a7:29:4b:db:13:99:a0:81:6d:
8c:90:48:b1:89:ba:2b:a5:48:85:49:51:e5:f9:e2:df:d9:c9:
a2:8a:e8:0d:0e:16:57:1c:36:f6:2a:64:d6:c8:ef:b8:dd:93:
80:b3:7c:04:ff:cd:5c:87:31:da:98:fd:22:0d:a7:65:6c:a9:
27:97:a7:68:15:b2:0d:aa:4c:4a:8a:f8:e8:a6:1d:56:46:9a:
2c:85:17:2e:38:78:2e:e6:f5:dd:f0:e0:44:83:24:f0:d1:d4:
13:58:bf:ad:10:d6:4a:ed:dc:e0:f8:f1:de:6c:1f:a2:ab:73:
d9:f3:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:36 2025 by rpki-client