
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: ZH/tD778khgkCOAIL/e4CBfSJyNQ4p93VzksKMAbLBM=
Subject key identifier: B3:BA:B1:A3:DA:1F:C2:F1:20:AF:1A:14:05:DF:18:17:E8:95:60:F0
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 019846646387DBD3508F688F8B089A46B04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 030D
Signing time: Sat 26 Jul 2025 11:00:40 +0000
Manifest this update: Sat 26 Jul 2025 11:00:40 +0000
Manifest next update: Sun 27 Jul 2025 11:00:40 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: ICoyr13nOKB/8F5bqcPtcEbaSpLat+GMBAjU90EL/Ak=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:63:87:db:d3:50:8f:68:8f:8b:08:9a:46:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Jul 26 11:00:40 2025 GMT
Not After : Jul 27 11:00:40 2025 GMT
Subject: CN=b3bab1a3da1fc2f120af1a1405df1817e89560f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:09:9f:16:24:44:d5:cc:4e:aa:17:58:8a:
dc:06:3c:35:45:fa:2b:fc:25:68:1f:1a:50:97:99:
9a:15:59:a6:e3:0f:dc:04:c4:af:14:e4:5e:d3:76:
a8:a9:75:95:53:4e:ca:12:82:28:0e:76:7e:04:b3:
d9:2e:c2:e7:fa:39:ab:19:fd:3a:a8:96:f8:3f:a9:
f3:78:0f:e7:0f:64:5d:0b:90:b4:e9:fa:aa:4c:2c:
67:c4:53:aa:43:92:a4:d6:f6:f6:69:22:1d:54:d0:
fa:50:b8:b1:8b:39:b5:ea:ec:7e:54:d0:a6:67:2a:
38:1b:d1:19:77:ae:f6:60:09:38:e5:d7:6c:d0:fb:
12:38:8d:6d:e4:bb:f2:80:d3:38:ef:bc:78:43:fc:
d5:4f:83:04:65:9a:92:8d:7c:89:f2:e3:ee:87:93:
61:72:2a:ae:4a:93:eb:a9:21:1d:3b:36:f2:f4:0b:
ab:d9:9b:6e:11:d2:08:10:b6:56:7d:5e:9f:b1:8e:
30:ca:6c:eb:8b:f9:57:ab:fd:37:c9:c1:6d:ab:f0:
df:81:0b:b0:2e:58:b9:b7:df:26:56:ab:f3:cb:fa:
82:36:9c:92:c2:37:d5:ff:a6:17:91:88:c9:b0:bc:
e1:10:d8:42:e3:a3:a8:88:1a:ed:46:60:ae:70:1d:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:B1:A3:DA:1F:C2:F1:20:AF:1A:14:05:DF:18:17:E8:95:60:F0
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e6:2a:68:fd:f3:8a:df:b2:c6:02:4e:64:7c:b6:c3:aa:ab:
dc:fc:8a:62:61:9d:d9:fa:61:c4:29:c0:06:be:ff:cd:71:df:
eb:90:90:5d:59:20:45:58:2e:34:4d:eb:93:53:2a:ad:5d:d7:
09:e0:af:a3:78:67:46:44:4f:e9:93:a8:6e:ee:5e:94:e8:66:
bc:6c:03:5a:68:e3:0e:e7:5f:87:38:78:53:80:98:40:b1:af:
57:59:83:dc:a9:9e:67:9d:d6:a4:de:1a:47:5e:be:b7:19:ef:
1a:8b:e8:7f:33:ba:81:5a:c1:44:f5:1c:4a:16:ba:a6:6c:6a:
3e:38:a0:1c:ef:68:3a:95:4a:d8:a7:54:3a:11:88:f1:8f:55:
89:7e:cf:c2:c6:0d:28:90:7d:87:30:88:e0:f6:e8:3f:18:69:
27:36:ed:fd:dd:a4:39:31:04:42:7b:0e:52:fb:96:f8:c2:41:
04:97:22:20:30:6b:fd:22:cf:77:d2:4a:53:07:75:0a:cd:34:
85:87:f4:ac:b4:d4:e2:fc:78:30:84:60:f0:9d:79:8b:48:c5:
04:b9:e8:47:e8:f8:57:6f:21:9d:1b:16:ef:a4:ce:42:92:36:
4b:9a:1e:ad:60:8b:c6:1a:ca:4a:a4:a2:79:5a:8d:f8:52:11:
c1:c3:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:52 2025 by rpki-client