Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: dXHyCNQfyJc9k1PPg8+8cPqYmcGRxGOSDxn+U0ELwjw=
Subject key identifier: EC:C0:92:43:9D:17:FD:9C:C4:94:5E:87:B5:BD:16:6B:75:05:6C:50
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 019677FB124E2E4AB73B7B7ABB1EE23626DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 087A
Signing time: Sun 27 Apr 2025 16:01:04 +0000
Manifest this update: Sun 27 Apr 2025 16:01:04 +0000
Manifest next update: Mon 28 Apr 2025 16:01:04 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: 3rj6gqcEfZviL5nNCA2PgSxqlq8mvnc/KVVszttZJOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:12:4e:2e:4a:b7:3b:7b:7a:bb:1e:e2:36:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Apr 27 16:01:04 2025 GMT
Not After : Apr 28 16:01:04 2025 GMT
Subject: CN=ecc092439d17fd9cc4945e87b5bd166b75056c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:3a:20:05:47:08:37:1e:a4:25:33:ae:20:
f7:bb:2b:d7:0f:c7:40:84:c1:70:95:c4:8d:fb:57:
86:f7:a3:ff:ed:f2:ab:ff:f1:cb:3a:e9:75:f5:2d:
6a:10:18:c8:f0:e0:61:d3:d4:b6:1f:35:09:73:2c:
c8:f0:a3:02:83:94:17:dd:5a:e5:c3:2f:2a:e5:90:
c9:37:c9:ca:76:56:8b:8b:cf:64:06:b3:78:ed:49:
ab:ab:68:45:6c:34:5a:58:56:9e:5c:25:5b:9c:01:
82:64:23:19:a7:19:2a:27:38:9a:60:8e:b4:cc:5b:
0c:32:fd:66:0b:e3:a2:5b:12:85:88:3c:c8:8d:69:
64:d6:c2:3f:6e:e5:16:78:85:7c:b0:4d:52:ad:62:
e8:7f:af:eb:42:40:25:33:87:9e:be:92:10:fc:64:
eb:8c:e4:0c:2f:d2:09:44:3e:bb:44:1f:8b:64:df:
09:34:c6:27:f5:44:49:7b:5e:82:48:cb:9e:ec:c0:
bc:bb:87:dd:91:bb:9b:11:d3:e9:ce:41:ef:94:c3:
0c:12:37:92:e6:f8:8f:66:bb:a3:d1:03:2a:6d:de:
8e:16:2b:f9:cf:c5:2c:b0:27:46:22:97:36:95:b4:
15:2d:a1:b6:df:cb:39:a8:c2:7c:76:d2:ff:b4:03:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:92:43:9D:17:FD:9C:C4:94:5E:87:B5:BD:16:6B:75:05:6C:50
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:bf:41:0c:95:11:94:b3:8b:8e:91:d2:63:b5:97:38:67:
05:eb:ca:a2:d5:ef:5e:9a:27:53:7b:e6:00:b5:8b:9e:23:22:
c4:43:2d:75:2a:6f:89:3e:e0:b2:1e:6b:9e:5f:ce:d3:ce:6b:
1f:ea:45:4b:05:9c:41:23:62:26:76:a8:cf:83:a0:c3:51:0b:
af:9e:91:48:e3:a5:84:bd:85:66:c9:3d:32:f3:f6:4a:7b:2f:
20:d2:0a:ab:3d:7c:5b:9b:33:e4:8d:29:fe:7c:d2:52:f7:f4:
36:f5:2a:a7:f7:e5:97:f9:e2:1e:33:97:b9:b0:ac:7f:a9:a6:
e9:79:a7:3f:eb:a8:92:4c:04:47:66:33:2a:d9:8e:0d:04:fc:
f5:9e:1c:51:10:c2:75:0b:de:e7:6c:81:00:e5:fd:f3:5e:41:
31:c8:74:5b:db:8e:3c:3f:65:7b:97:b7:c5:fa:32:c0:aa:a2:
27:a4:89:d0:f0:05:31:7b:c5:cc:40:a4:a7:94:24:27:7a:c5:
8c:08:e1:2f:7f:91:80:10:e9:74:f8:c3:5b:be:b2:2c:c0:88:
ad:1f:b6:fe:a9:99:2f:7a:96:eb:0e:2f:5c:f8:fa:a3:d7:59:
49:fa:46:fd:72:9a:2a:9a:e0:ef:65:ca:c0:5a:e6:31:02:9f:
f5:b3:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:34 2025 by rpki-client