Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: ACQrio4u1OSi7ij5igBbGJIP3owwdI3h57u+BcRDekw=
Subject key identifier: 2C:47:02:BD:91:3F:0D:5F:AC:A3:00:8C:EB:6B:F4:02:A7:FC:8A:23
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 01976961055FD2DB64861B95FE330A9374F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 09C8
Signing time: Fri 13 Jun 2025 13:00:55 +0000
Manifest this update: Fri 13 Jun 2025 13:00:55 +0000
Manifest next update: Sat 14 Jun 2025 13:00:55 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: Zx0Cp3cPgTvlKu59M0e4SS/AjPIiArRBzN0WX6MbxqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:05:5f:d2:db:64:86:1b:95:fe:33:0a:93:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Jun 13 13:00:55 2025 GMT
Not After : Jun 14 13:00:55 2025 GMT
Subject: CN=2c4702bd913f0d5faca3008ceb6bf402a7fc8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:73:58:6d:01:b1:37:d5:9c:a3:a8:bc:9d:
0c:21:9c:e6:67:61:23:f6:57:c5:2e:5c:15:0a:c5:
34:0f:c3:60:28:af:3d:50:f6:40:97:49:a1:db:f6:
0a:14:84:7b:5b:8f:02:1a:74:f3:f3:98:eb:3f:39:
da:b8:df:b6:49:20:b6:45:80:ea:76:75:ba:d7:8c:
ed:6b:74:4c:81:c3:c1:41:e8:25:d8:3a:4e:43:5e:
33:31:b7:ef:d0:b1:2f:31:0d:7c:d8:98:7a:b2:dd:
a3:d4:61:ff:fc:84:7c:26:d6:39:97:ab:fb:8a:c1:
fd:55:b0:11:d9:f3:06:69:16:73:b6:c3:39:b4:06:
8f:95:8e:54:ba:4b:70:65:99:11:17:ea:71:c8:95:
5c:a5:b0:00:56:6f:b3:08:cb:87:18:18:91:bb:eb:
22:e7:11:c4:c4:89:28:9e:c7:55:d8:97:10:1f:eb:
86:3e:3a:8c:0a:53:f3:7c:25:6f:81:6d:82:9d:4b:
09:71:36:d0:e2:dd:53:82:50:b2:f3:52:74:70:30:
59:ff:67:f2:0f:e8:6a:3a:aa:b2:00:6a:8c:01:0a:
26:79:61:08:e5:4a:0f:7e:b7:3f:b2:6c:08:e1:6b:
01:14:b3:16:16:76:a1:88:63:ef:65:44:1f:9b:96:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:02:BD:91:3F:0D:5F:AC:A3:00:8C:EB:6B:F4:02:A7:FC:8A:23
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a1:0b:9f:bf:63:c3:61:79:09:02:ae:c6:03:63:6d:0b:a3:
02:c3:07:79:a1:59:66:06:9c:e1:04:08:70:ec:7c:ef:47:bc:
de:de:b9:19:99:37:a0:3f:61:86:e8:52:90:78:15:b0:eb:7a:
af:df:95:9d:a4:bb:48:8f:f9:6e:cf:f5:8f:d2:ce:bd:21:05:
82:33:c4:7f:66:4e:81:d8:a2:72:7d:ca:77:ad:2c:31:2a:0c:
ca:0f:39:30:04:b3:de:46:95:5c:64:7d:37:66:e7:fc:8d:d4:
94:d3:7e:6f:81:6c:31:76:f8:f4:2b:83:e1:42:a6:28:e7:0e:
05:0f:4c:15:aa:f2:c5:f5:80:e8:22:a3:1c:21:b7:74:ee:74:
3e:95:d7:26:b9:ff:f4:32:0c:52:38:ce:36:02:25:e5:b9:6c:
f4:88:23:87:71:75:2b:69:64:fa:ef:4f:e0:fc:38:5c:32:2c:
c9:26:a0:da:bc:1e:30:5c:57:c6:94:bb:d7:f4:ee:7c:6d:f6:
ba:75:dd:d4:ef:95:d1:d8:b2:ab:e8:26:1f:fb:a5:d6:38:54:
2e:0e:32:3a:b0:45:85:16:b9:da:1e:37:88:d2:28:13:24:12:
66:74:c2:59:2b:90:d4:4b:59:2c:e3:ef:43:ed:f5:46:a9:ca:
4a:90:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:14 2025 by rpki-client