Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: OcUd8rruxcefylhNd9q/hugcbFeXdDhIssXTeaHFlXE=
Subject key identifier: 88:7E:3A:3A:D6:2F:24:48:B1:61:8A:BA:5B:AF:2B:58:24:98:C8:1D
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019768BC2FAD7C25AF24DB9FFD3BC44BE304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 0F88
Signing time: Fri 13 Jun 2025 10:00:52 +0000
Manifest this update: Fri 13 Jun 2025 10:00:52 +0000
Manifest next update: Sat 14 Jun 2025 10:00:52 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: OWo/m3zWN4/kZnz9bxjCaEFqo7YA5BFsugOH1neANYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:2f:ad:7c:25:af:24:db:9f:fd:3b:c4:4b:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Jun 13 10:00:52 2025 GMT
Not After : Jun 14 10:00:52 2025 GMT
Subject: CN=887e3a3ad62f2448b1618aba5baf2b582498c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:ba:46:a6:2b:f0:79:72:78:96:f6:d2:bc:
7f:59:56:cd:99:df:6a:8e:76:7f:72:77:cf:85:e6:
2d:23:75:ff:b9:56:ff:2e:d9:cf:ca:8c:fd:bb:b6:
31:a7:3a:18:2f:53:31:fa:b7:5f:fa:73:e7:1f:34:
3a:48:02:85:6e:9a:25:0b:46:06:14:bb:73:3c:fc:
d3:30:ca:b8:76:42:50:27:99:66:67:91:e2:2e:0b:
e4:a8:7b:3a:60:ca:be:06:3f:d9:27:d2:c2:9f:c4:
f8:a6:68:6b:b9:0a:64:94:4b:2a:60:d9:07:ad:ea:
50:fa:e8:c2:27:ee:5e:f8:19:77:e3:68:36:4e:db:
9c:71:95:33:c1:69:8f:fb:d0:25:f6:91:20:32:bd:
e3:e7:97:6b:1b:d0:24:aa:f3:66:b6:be:53:94:7d:
1b:c5:18:16:3e:70:0a:67:23:68:19:59:9d:0c:2a:
83:9d:1a:20:33:65:9e:8f:79:6f:03:ae:2d:00:b6:
02:c4:01:65:d8:0a:72:5c:db:22:13:75:09:44:07:
7b:43:55:c4:d4:2e:a9:5a:4b:b2:56:01:d6:72:4a:
90:56:c0:5b:e5:0a:52:61:8c:b8:07:33:a3:92:0f:
63:4b:e3:05:69:9b:7f:5b:59:48:f6:86:72:6f:90:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:3A:3A:D6:2F:24:48:B1:61:8A:BA:5B:AF:2B:58:24:98:C8:1D
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f1:07:a8:43:96:38:31:3b:0e:35:9d:96:04:75:49:3f:9e:
aa:0a:07:de:7b:b9:43:d7:7d:93:6e:df:78:e9:10:b7:a0:56:
c0:b0:e7:0b:63:44:e2:c6:ec:7b:de:26:37:84:d8:01:1f:f7:
c1:87:4e:b1:50:ee:80:7d:93:19:ad:df:2d:45:df:b9:93:4b:
90:06:63:d4:45:42:35:37:a2:54:2a:a7:8e:d6:26:fc:45:f9:
b8:b1:dc:6d:3f:79:3d:ae:6c:d2:be:67:c1:40:2a:c8:6e:f0:
fd:3a:e9:4e:6d:e2:a6:2e:b8:3b:f4:d6:90:aa:b3:e3:b8:54:
04:ae:dc:55:b9:48:bb:a5:75:98:d6:a7:54:ac:f7:86:d9:9b:
6b:c6:6b:bb:98:53:ad:9a:48:4a:9f:06:86:55:4f:13:00:dd:
66:61:df:dd:e9:01:0b:d3:0b:d8:12:88:a9:26:c9:f2:f8:68:
c3:29:a2:a6:0e:72:6e:fb:b3:75:be:6a:ec:5a:43:4b:33:36:
3d:43:7e:33:34:6b:6c:f7:0f:e4:5b:07:a5:8e:dc:0a:ed:ef:
c0:9b:04:ef:57:b3:67:1f:70:ff:a4:f9:a2:f7:66:6a:31:dc:
59:4c:cf:3d:6e:8f:83:59:c4:04:37:8f:5d:cf:1e:97:0c:14:
56:c3:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:12 2025 by rpki-client