Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: 2ZQkI+Z3wgnZQzNXQpvbiPSoBhLs6h1VCpAGkHc5wEQ=
Subject key identifier: E4:D1:44:1F:3B:93:06:5E:62:04:98:DD:AF:E2:6C:84:45:4F:B9:3A
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 01976D3E1F541D97739BD0636251F83F2E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 08F9
Signing time: Sat 14 Jun 2025 07:01:17 +0000
Manifest this update: Sat 14 Jun 2025 07:01:17 +0000
Manifest next update: Sun 15 Jun 2025 07:01:17 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: C45x2tfzH6EhM+5+fu+qKsYeWW5MME+QX1dfetjdxAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:1f:54:1d:97:73:9b:d0:63:62:51:f8:3f:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Jun 14 07:01:17 2025 GMT
Not After : Jun 15 07:01:17 2025 GMT
Subject: CN=e4d1441f3b93065e620498ddafe26c84454fb93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:01:7d:0b:03:55:e9:2c:8b:f7:56:f1:0a:
53:be:b8:af:b4:01:a4:d5:c6:8c:89:be:9b:af:f4:
be:55:be:35:a9:46:2f:d2:bc:28:c2:5b:2d:93:53:
6f:71:0d:a5:02:46:b6:d0:d2:51:fd:8c:40:af:f1:
19:4b:62:1d:dc:b0:d6:b1:ee:43:16:0d:7d:62:f0:
34:29:5f:e8:ba:8a:92:b3:7e:87:33:92:f3:ef:bf:
14:cd:43:7a:3c:ed:08:ed:c0:1a:87:6b:3b:1c:c4:
4d:a7:ed:c3:0a:8c:5a:a2:13:bd:4f:c1:96:15:2e:
37:d5:ec:2b:c5:a0:16:8f:ea:ff:0b:9c:3c:cf:ed:
af:68:55:e7:93:c7:8e:a8:f4:75:83:81:28:33:cb:
03:7c:8a:4d:34:2f:95:35:a8:7f:9f:c5:a3:f2:e4:
0b:d1:1a:f8:f5:2e:e7:95:d2:07:fa:86:40:6a:50:
8d:93:c8:02:38:35:db:d9:ee:50:68:91:48:f1:28:
be:1c:be:75:f5:f0:4e:8b:a9:09:0f:26:9c:7b:03:
79:58:a7:c3:05:8a:c7:97:c8:9a:13:c0:bd:84:31:
c3:53:56:81:bb:d0:a4:7a:e8:90:94:58:2e:9d:1f:
5d:d4:06:8e:fc:b8:80:34:13:7f:5b:46:2f:50:bf:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:44:1F:3B:93:06:5E:62:04:98:DD:AF:E2:6C:84:45:4F:B9:3A
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:96:bc:f1:b8:e3:4b:d7:01:d2:8f:6e:de:b6:d0:3e:b6:4a:
df:e7:1f:71:59:d7:e4:de:cc:ee:95:13:fe:6f:8b:37:13:fa:
2f:b9:cb:e0:90:5b:ad:d3:9b:9a:27:1a:41:b1:7e:7d:03:a5:
d5:4d:5b:21:ed:84:01:66:b1:0f:21:3d:9c:10:0c:b9:4b:e3:
68:37:12:a7:8a:24:f8:f2:bf:14:b7:d4:99:3d:71:3b:4e:bd:
89:45:d4:b5:8b:6e:f6:7f:a7:9e:89:9f:d5:67:c6:57:84:4e:
f0:7c:03:37:2a:8a:29:58:a5:f0:86:98:8a:b0:73:41:6d:94:
0d:c4:3d:77:13:8d:10:3d:1e:05:d4:1c:7c:38:1f:6c:7b:f7:
90:f1:f0:7f:63:ae:68:a7:c0:03:ab:ac:7f:dc:4e:47:76:f1:
6a:7d:1d:1d:b5:87:6b:49:dd:8c:1f:51:61:f4:49:1b:ed:09:
6d:cc:56:9b:b4:af:29:82:1f:a4:79:4a:4c:ef:76:ae:86:45:
7b:31:f2:d3:8f:52:4e:0d:70:a0:f7:e5:f3:a6:57:f1:e4:88:
26:41:c2:03:3f:2d:d0:11:10:4d:f5:f2:e7:a4:06:f2:93:89:
f0:ec:3f:86:c2:b2:e4:08:4e:24:ab:3e:66:0e:40:b3:90:f0:
52:37:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:37 2025 by rpki-client