Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: TllE9ESPOc+5Mr7wd78WCbK6FAia6lVUSgYEJHGquR8=
Subject key identifier: 1E:DF:E7:07:0D:91:74:1E:F2:9A:33:74:53:0B:44:4D:EB:5B:1B:B1
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 01984A0A69803A968DB4C6156CDDBECC0F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 04CC
Signing time: Sun 27 Jul 2025 04:00:52 +0000
Manifest this update: Sun 27 Jul 2025 04:00:52 +0000
Manifest next update: Mon 28 Jul 2025 04:00:52 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: F1AQiW3XF1FVqwr8fpQS0ngc0YBdyMO2el3yqRD2lIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:69:80:3a:96:8d:b4:c6:15:6c:dd:be:cc:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Jul 27 04:00:52 2025 GMT
Not After : Jul 28 04:00:52 2025 GMT
Subject: CN=1edfe7070d91741ef29a3374530b444deb5b1bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:5c:c9:1c:2e:28:ac:83:09:16:08:6c:f0:
a2:52:0f:94:f9:9b:d2:c0:7d:24:1c:a1:cd:ba:77:
53:e1:c7:3f:ab:5e:0f:1f:95:68:f9:95:84:c9:ad:
35:66:72:df:2c:a1:b1:2a:17:bf:b0:c4:74:89:19:
7c:ed:dc:03:c3:fe:f2:53:ec:b4:d8:e1:92:27:88:
93:64:b4:97:3f:6c:43:d6:9e:94:ae:20:50:85:c6:
5f:99:bf:2b:bd:a8:8c:36:00:6e:68:4a:91:66:11:
fe:d8:58:cd:55:79:6a:09:24:c1:e4:0e:59:68:b7:
7a:ae:34:6a:93:fd:2f:71:1d:52:7d:fd:11:e7:e9:
36:0a:7e:4e:41:35:ab:f9:1c:e6:82:85:46:70:bd:
2c:3b:7b:16:34:bd:7b:99:a1:50:fc:c4:2e:3a:23:
7b:af:5c:4b:97:77:30:b5:b0:78:7c:cf:29:9a:f2:
b6:67:98:52:5f:9b:5d:77:34:61:8f:66:7b:0b:e0:
ce:3f:aa:ab:fd:75:3e:e6:e5:50:11:67:4b:86:b9:
77:89:16:b8:ae:cc:17:f1:cd:bd:c3:31:d4:08:48:
e1:2d:31:9d:8b:29:08:d2:a8:e7:c7:28:d5:c4:d7:
93:18:ab:5d:30:86:06:bd:21:e7:4f:75:dc:10:ae:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:E7:07:0D:91:74:1E:F2:9A:33:74:53:0B:44:4D:EB:5B:1B:B1
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c4:60:2a:f2:28:c3:93:13:d7:ae:d7:27:ed:a7:4b:71:9e:
73:a3:c8:fb:54:8e:6a:75:24:79:f3:31:af:9a:44:24:d3:b6:
93:f9:27:98:6a:a9:a0:74:62:09:dd:b1:a9:a6:db:f9:88:43:
c0:eb:00:74:53:c9:26:ae:4d:c8:fd:0b:47:e7:21:fe:0f:b0:
a2:2c:7e:04:b5:c9:bb:6b:59:50:43:80:b9:c2:a2:67:08:cb:
14:0b:12:49:77:19:0d:3b:4c:93:14:9a:16:df:25:8e:97:7a:
50:6e:45:e2:4b:5b:c3:79:cd:62:64:6f:14:99:09:c0:69:ee:
46:44:29:e8:6b:bd:2a:6b:27:5b:19:fa:7d:97:d8:21:f5:ec:
9f:8c:c4:63:ff:c9:be:4a:db:3c:dc:80:15:1e:dd:e9:de:5a:
f7:14:1a:50:c4:01:2a:16:da:4e:2d:88:59:07:e6:40:19:a7:
16:9b:4d:51:f0:ca:f3:30:b1:70:cb:66:a6:63:a4:0d:8c:05:
3b:79:b4:57:57:42:4c:cb:86:6f:84:8b:11:d9:8f:5a:29:78:
fb:b0:d1:c4:57:99:38:42:a1:47:85:8b:8d:8e:76:93:6c:8d:
90:e4:9c:f8:d1:fb:71:20:6e:a6:d8:40:fa:a5:65:df:0c:c3:
ea:6b:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:53 2025 by rpki-client