Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: cDARMl7qG0XS/hNl8RnNg6ojnbmPcq+p6Pd97PiWP+U=
Subject key identifier: 3B:CE:E6:35:86:64:FC:33:FF:F0:CB:37:89:87:C4:42:3E:A3:61:74
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 0197488C949C17B219D43241D64E0F8FC142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 08E6
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: CbCFf948EqDV9XF3bESCNdm/L5KUZBvrhQ49LlIpAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:94:9c:17:b2:19:d4:32:41:d6:4e:0f:8f:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=3bcee6358664fc33fff0cb378987c4423ea36174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:5e:5d:f4:95:5a:0e:0c:b5:ff:e5:e3:17:
a0:8d:5e:05:33:5c:28:88:dd:5e:54:fc:92:16:0e:
a7:4b:4b:73:dc:19:84:4d:57:9c:e7:78:4a:9e:86:
a8:4d:65:ad:0f:5b:ae:d9:df:ad:e5:d5:cc:9a:6f:
b9:a0:cf:99:54:1a:c1:7a:4d:74:63:0d:7d:93:5f:
ce:4f:86:62:d5:8c:f5:87:21:15:67:64:ba:f8:99:
cd:bd:27:ec:20:b2:a2:8a:e8:01:08:0a:43:4e:f3:
e6:14:aa:6b:bb:ec:c2:c0:6f:41:17:f6:4c:f0:34:
22:a8:ae:d6:e3:2b:a4:e0:37:c2:dc:77:be:20:18:
3b:0f:ad:e8:c6:ce:7b:77:14:21:e0:a3:a7:f7:a2:
6e:2b:f0:82:9f:45:71:d2:39:b0:c4:bc:80:85:d0:
39:20:26:d6:65:3d:bc:47:ca:b0:1f:98:b6:a5:51:
ae:c4:8d:07:fe:bd:a8:a8:26:f8:a7:8d:98:dc:9c:
14:a7:8d:a4:be:28:2e:b9:27:10:f6:6a:20:6e:97:
b6:c2:19:aa:c2:f0:fb:c2:87:fa:d7:23:58:f4:b5:
ca:c5:85:93:b3:34:3d:90:9e:79:7f:a9:74:35:49:
59:a4:9e:d6:c0:82:63:a1:4e:15:39:d6:6f:73:d6:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:E6:35:86:64:FC:33:FF:F0:CB:37:89:87:C4:42:3E:A3:61:74
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:c8:d1:5b:09:01:f2:d5:c3:d4:16:59:db:67:0f:7c:ba:
a2:ae:79:64:54:f5:38:9f:e4:97:85:c2:aa:b2:07:2b:e5:d4:
3c:73:93:cb:0b:20:2a:25:be:7d:6f:47:22:60:68:16:b8:15:
66:42:b4:56:d8:ac:7d:ae:eb:35:c4:ac:50:af:83:8e:3a:9d:
b0:25:b9:59:b7:d1:0f:3f:ff:64:47:11:e3:8c:3c:7d:b4:ad:
9d:15:0b:99:e9:91:29:85:11:40:17:96:12:b7:bb:f2:86:c4:
d6:dd:9f:cb:9c:d1:d4:97:96:68:6f:03:e2:02:3b:c2:44:e4:
3c:6c:86:cd:3c:c0:b6:8e:2e:70:23:28:b9:4b:ab:64:4b:4a:
8f:b0:f5:65:2d:44:cc:17:f9:ed:64:fd:2e:09:96:fc:19:98:
f1:a3:d6:7f:24:01:7d:d0:76:3d:8b:46:e8:c5:89:cb:45:53:
e3:6b:9e:d4:1c:b8:8c:17:42:f7:06:a2:f3:80:cd:ee:39:26:
e6:c6:6e:a6:ea:e7:6b:5b:54:b7:72:cf:8e:b6:20:1e:cd:4f:
35:3e:3a:12:51:1c:5d:6a:71:49:fa:85:2b:84:b3:26:26:95:
27:3f:10:e8:d9:00:99:52:85:c8:8f:bd:fe:e3:0b:c1:69:54:
dc:b6:67:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdIjJScF7IZ1DJB1k4Pj8FCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWRjNmU3ZmYyZjIyYzQ5MDU3ZjdmZjMwN2VkODdlMTUw
OGVhMTEwHhcNMjUwNjA3MDQwMTAxWhcNMjUwNjA4MDQwMTAxWjAzMTEwLwYDVQQD
EygzYmNlZTYzNTg2NjRmYzMzZmZmMGNiMzc4OTg3YzQ0MjNlYTM2MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhNeXfSVWg4Mtf/l4xegjV4FM1wo
iN1eVPySFg6nS0tz3BmETVec53hKnoaoTWWtD1uu2d+t5dXMmm+5oM+ZVBrBek10
Yw19k1/OT4Zi1Yz1hyEVZ2S6+JnNvSfsILKiiugBCApDTvPmFKpru+zCwG9BF/ZM
8DQiqK7W4yuk4DfC3He+IBg7D63oxs57dxQh4KOn96JuK/CCn0Vx0jmwxLyAhdA5
ICbWZT28R8qwH5i2pVGuxI0H/r2oqCb4p42Y3JwUp42kviguuScQ9mogbpe2whmq
wvD7wof61yNY9LXKxYWTszQ9kJ55f6l0NUlZpJ7WwIJjoU4VOdZvc9YY0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDvO5jWGZPwz//DLN4mHxEI+o2F0MB8GA1UdIwQY
MBaAFPjtxuf/LyLEkFf3/zB+2H4VCOoRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PM0c1Xzh2SXNTUVZfZl9NSDdZZmhVSTZoRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZTRmZTE3LTY5MDgtNDQwYi04NDRm
LTZlYTU4N2I3MWRkZS8xLzEtTzNHNV84dklzU1FWX2ZfTUg3WWZoVUk2aEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3L2U0ZmUxNy02OTA4LTQ0MGItODQ0Zi02ZWE1ODdiNzFk
ZGUvMS8xLU8zRzVfOHZJc1NRVl9mX01IN1lmaFVJNmhFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0XI
0VsJAfLVw9QWWdtnD3y6oq55ZFT1OJ/kl4XCqrIHK+XUPHOTywsgKiW+fW9HImBo
FrgVZkK0Vtisfa7rNcSsUK+DjjqdsCW5WbfRDz//ZEcR44w8fbStnRULmemRKYUR
QBeWEre78obE1t2fy5zR1JeWaG8D4gI7wkTkPGyGzTzAto4ucCMouUurZEtKj7D1
ZS1EzBf57WT9LgmW/BmY8aPWfyQBfdB2PYtG6MWJy0VT42ue1By4jBdC9wai84DN
7jkm5sZupurna1tUt3LPjrYgHs1PNT46ElEcXWpxSfqFK4SzJiaVJz8Q6NkAmVKF
yI+9/uMLwWlU3LZnQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:07 2025 by rpki-client