Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: tRi73I0qKVgwzGVnGF0Nv9MGxqu573yOc46tyTMTD+U=
Subject key identifier: 44:C4:5D:7A:88:22:F8:6E:8E:70:50:94:3D:7F:E3:46:B1:D8:B5:78
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019771885BEBF9D7B352102ECDB862B2468B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 03:00:51 +0000
Manifest this update: Sun 15 Jun 2025 03:00:51 +0000
Manifest next update: Mon 16 Jun 2025 03:00:51 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: 9x7f1GfqTLsmetNJymh9A4dc8SnM43dqHvH7iVtPTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:5b:eb:f9:d7:b3:52:10:2e:cd:b8:62:b2:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Jun 15 03:00:51 2025 GMT
Not After : Jun 16 03:00:51 2025 GMT
Subject: CN=44c45d7a8822f86e8e7050943d7fe346b1d8b578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:03:2a:84:16:71:ae:6a:53:6d:58:51:91:
2b:68:63:e7:26:5e:72:1e:eb:2f:a6:40:99:19:39:
fa:43:67:bb:55:16:fc:6e:b4:7b:63:e6:b6:58:b5:
fb:48:ef:c8:a7:2a:8b:2f:c9:82:81:86:d6:ee:e9:
79:a6:6d:52:41:93:c6:ab:0f:f4:62:9e:96:0e:4e:
5a:43:36:c9:60:72:9b:f5:fa:99:6d:4d:55:6a:53:
f2:f6:fe:6d:cc:05:89:51:db:1c:0a:74:81:e1:0e:
e2:76:00:03:62:10:f5:5a:13:7a:5a:83:58:49:31:
b2:4c:aa:5d:8b:af:d5:48:44:84:5b:a3:70:b5:e9:
d9:8b:ba:a3:50:26:ad:d6:dc:6b:1b:1b:26:65:fa:
d6:19:6e:8e:45:1e:19:d0:53:91:19:33:35:c9:87:
77:17:58:40:e4:10:b2:51:60:26:01:ba:f2:6b:07:
6a:ac:17:15:3e:2e:d5:9b:ae:4d:c2:a9:d8:47:ff:
e9:32:ca:98:8a:02:c9:b1:82:98:f8:4e:8b:ba:5e:
b6:08:8d:fb:df:4a:4f:05:5b:a7:16:8c:21:12:49:
d0:e5:70:f2:37:05:7b:e1:b8:34:a7:b6:dc:86:ac:
52:e8:49:2f:31:24:d3:97:5a:23:e1:2b:e9:80:31:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C4:5D:7A:88:22:F8:6E:8E:70:50:94:3D:7F:E3:46:B1:D8:B5:78
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:f7:fe:a9:2e:72:e7:fb:c0:c7:82:12:c2:17:24:f7:00:
d5:c5:19:e3:29:32:63:8e:52:45:43:60:89:ab:49:bc:13:7c:
20:27:91:35:7f:c1:f1:4d:36:b6:bd:dd:8d:e7:33:ba:08:67:
73:07:c5:e1:6c:56:c8:7d:f5:6e:d3:07:b0:f9:82:55:ee:e2:
d6:2d:7b:88:f8:1b:36:1b:35:a8:f5:37:0a:75:43:b1:35:8d:
ab:00:25:69:53:39:1c:2b:a0:a6:29:0e:bf:45:2b:86:0e:b5:
8e:f6:f8:61:db:4a:36:76:60:9a:09:c1:80:d6:83:9c:29:c5:
51:01:56:a9:e7:2a:5c:8e:ac:4c:ba:93:49:4f:fa:57:99:e9:
a7:22:36:3e:17:eb:1f:0f:d0:d2:49:ca:94:c8:03:77:2d:ab:
d4:3e:25:0d:b0:89:b4:c0:b9:07:0e:23:e3:f9:d6:9b:48:ad:
e0:43:cc:1d:de:c3:54:1d:f8:a9:fb:fc:a6:b5:cb:88:16:73:
99:f2:f2:a1:e3:4a:ea:35:6a:7c:c7:39:ce:88:a6:d4:90:03:
05:9d:d5:24:94:71:92:24:f4:ec:d5:dd:8b:0c:35:9e:5f:00:
5f:0f:ea:b3:3e:5d:79:31:a7:26:5e:6a:dd:6b:ee:e0:2f:31:
35:fb:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:16 2025 by rpki-client