Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: oASZEOOvbbN5w5cMmMqSH5catGkHbNHmNXSk+OXhuGE=
Subject key identifier: 7B:96:CD:CA:93:62:70:55:B2:AE:EE:7F:2A:E3:D6:C2:E6:B4:D0:53
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 019789224C5A1D5472B5677E59F1C1F9907B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 1109
Signing time: Thu 19 Jun 2025 17:00:15 +0000
Manifest this update: Thu 19 Jun 2025 17:00:15 +0000
Manifest next update: Fri 20 Jun 2025 17:00:15 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: qWSSJuZej6LQzkzEA9EXbquHQzdfbbXsriURHYHdr9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:4c:5a:1d:54:72:b5:67:7e:59:f1:c1:f9:90:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Jun 19 17:00:15 2025 GMT
Not After : Jun 20 17:00:15 2025 GMT
Subject: CN=7b96cdca93627055b2aeee7f2ae3d6c2e6b4d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:83:de:9a:40:b2:d3:3d:24:89:fb:87:89:
12:83:43:ac:95:77:31:05:7e:d0:5a:20:4b:bf:f9:
4c:05:2c:77:2f:82:74:99:ed:dd:7d:fc:56:d2:29:
02:be:09:74:5f:5d:cc:e9:42:05:2a:01:36:e2:3c:
5c:c2:51:aa:44:29:3c:aa:ab:e3:d6:7b:5e:38:03:
74:8d:02:12:03:39:16:e7:6d:39:b1:a1:d2:0b:20:
ab:ff:15:c8:3d:8c:48:88:05:e7:16:b4:9b:ee:bf:
bb:c8:da:8f:79:00:d7:36:8d:67:1f:3c:4e:13:ef:
8d:a9:8e:c5:a9:68:3a:6f:63:6b:22:3d:90:3c:43:
a9:e0:73:96:65:d9:fa:89:01:8a:b6:43:1e:ce:db:
78:44:2e:3a:e9:dd:42:1e:83:c1:55:9c:55:05:3e:
1a:42:11:1a:bc:fa:06:c2:64:c1:96:d9:96:61:8d:
a4:95:b6:82:86:86:99:6b:b7:ff:e1:3d:7a:28:d5:
0d:58:73:48:44:7c:3b:23:5f:33:2d:0c:19:5f:ea:
32:56:f8:29:d8:f3:89:8d:8e:94:75:4a:21:9d:7b:
e9:a1:85:74:27:f3:6d:6d:75:e4:8a:6c:f0:9b:36:
da:a0:8f:65:11:8a:e6:b1:f5:98:c1:83:af:6f:f5:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:CD:CA:93:62:70:55:B2:AE:EE:7F:2A:E3:D6:C2:E6:B4:D0:53
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:e3:aa:67:51:5c:c7:df:2a:61:ba:8c:ba:06:b4:60:9c:
29:8c:09:b1:95:b4:9f:7d:13:ac:4a:37:fb:43:8d:f8:db:bb:
10:2a:d2:2a:d3:77:4b:5c:17:ea:42:ec:3d:e6:43:c7:3c:6d:
6d:9c:df:92:c3:28:b7:1e:4f:e1:77:24:8d:c1:c9:aa:17:27:
2d:3b:7c:80:45:1d:bf:59:2f:a3:53:27:12:1b:22:0f:ce:72:
b4:7f:e0:d6:a4:90:a6:90:43:57:d8:d7:5a:b9:f7:16:26:d4:
46:2d:3b:d1:10:88:32:06:ec:49:df:64:dd:a9:41:92:8f:e0:
36:f5:2f:9f:36:c2:80:ab:68:ff:bd:53:a4:a4:67:9a:54:d5:
68:e6:b2:d8:d3:49:a0:fc:61:26:0e:c3:d1:47:cb:da:0d:52:
64:0e:58:44:11:8c:2c:0a:c2:2d:f4:71:fc:5e:2c:01:ed:c5:
17:4a:98:b5:7b:aa:17:c6:01:3e:1b:6e:7f:4f:82:b1:10:d6:
5a:bf:33:32:b6:ee:71:c5:68:1a:b0:34:88:4d:86:d3:a4:ca:
e8:43:a2:4a:b0:bb:e9:b1:9d:02:ea:bb:05:fb:b0:98:6c:8c:
8e:e3:3f:83:fa:ec:be:7b:2a:46:2a:bd:a2:b9:d6:c8:b6:76:
eb:9b:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:16:51 2025 by rpki-client