Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: HVJlDDZ5MN6FjixQYHCI48uXu3pov555wFXMRMpBcNE=
Subject key identifier: 95:86:5C:F2:C2:C2:E4:4A:32:5F:D0:CE:E1:B5:48:48:21:5E:E1:37
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019747E78366547D36E349337F566FBDEC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 1509
Signing time: Sat 07 Jun 2025 01:00:44 +0000
Manifest this update: Sat 07 Jun 2025 01:00:44 +0000
Manifest next update: Sun 08 Jun 2025 01:00:44 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: bWUVY9qIKfWpMZbCiQcaOvrGMDgvqqe+sRdCHOxNH4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:83:66:54:7d:36:e3:49:33:7f:56:6f:bd:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Jun 7 01:00:44 2025 GMT
Not After : Jun 8 01:00:44 2025 GMT
Subject: CN=95865cf2c2c2e44a325fd0cee1b54848215ee137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:e1:5e:e4:01:26:d4:8b:14:69:ce:bb:e7:
e1:62:3b:a1:0e:47:b0:57:a2:f3:20:2b:8e:e8:0f:
ad:6e:50:65:ab:53:73:23:27:44:14:d8:14:e7:fb:
b7:a8:b0:11:99:2b:b2:45:3c:a2:88:83:b5:6d:91:
1a:e6:7f:4b:41:cb:a1:fa:e4:2d:c6:eb:3a:2c:3e:
3b:7d:39:bd:7a:1e:18:31:0c:5f:f9:0c:95:01:2b:
22:1f:bb:b4:5e:76:f1:e0:26:09:18:d5:a5:10:07:
ce:51:c0:e9:40:5b:4d:61:28:ed:fe:93:f9:33:ca:
36:4e:d6:6e:1c:40:2d:07:37:0c:f2:a6:19:e7:e6:
33:f2:0a:2f:1c:28:8d:25:c8:31:ba:c7:bd:2c:1c:
3f:45:93:02:77:4b:c3:7b:bd:86:08:b7:1f:d4:73:
bf:3b:76:a3:ae:ad:9d:c3:03:a0:70:f9:49:ec:99:
bf:f5:a0:5b:db:02:fc:03:83:30:c8:51:ef:3c:85:
ea:a4:41:ef:02:86:d1:61:dc:22:ee:e5:34:4b:a7:
93:1b:c6:50:6d:50:1d:b9:95:49:2d:c1:97:19:27:
61:0b:41:d9:22:69:78:fd:09:bc:04:f4:a2:b1:21:
88:6f:dc:21:2b:d8:9e:ab:6c:76:81:26:cd:f4:e6:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:5C:F2:C2:C2:E4:4A:32:5F:D0:CE:E1:B5:48:48:21:5E:E1:37
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:22:d5:86:5f:93:7e:bc:af:64:ba:f9:5b:31:62:ae:37:e0:
d5:74:08:14:67:1c:8e:13:9d:18:f8:6f:4b:b5:62:e1:ab:fd:
e6:bf:e9:75:c8:30:c4:d7:db:dc:77:f9:fe:c7:88:59:44:21:
60:b0:67:bf:bf:ae:95:8e:96:41:75:99:03:07:15:da:af:d4:
37:c0:82:d6:83:6f:61:c3:db:64:da:11:ff:b9:8a:bf:d9:17:
48:15:06:77:1a:80:c8:82:5b:7e:a3:b6:14:40:56:63:e1:22:
a6:08:97:44:d5:22:d7:45:93:ac:4d:ea:3c:bd:ae:b8:f1:cb:
69:78:95:07:c1:e8:63:d1:f7:c0:af:28:53:19:94:68:7a:ad:
6e:08:2f:ad:20:35:d6:6a:ef:59:01:56:93:48:86:26:cf:bd:
89:a8:7d:16:a6:1c:e1:5c:b7:47:c1:66:e4:2c:f7:6f:fe:4e:
3f:6d:ac:49:70:25:29:41:09:6d:aa:fd:04:8d:08:5c:a1:e5:
c2:af:9a:79:2d:5c:3f:00:6a:45:af:85:7b:a1:a1:5f:0d:c2:
b2:de:0b:9a:47:5a:0f:7f:9d:97:3c:e8:aa:d5:54:a2:ab:ab:
39:9f:d7:d0:26:04:2a:65:6f:29:59:c8:97:39:39:b2:e9:16:
b7:f8:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:04 2025 by rpki-client