Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: gbeDG3AKUw0kTFudOR1duPB+nYjzGPC2NBZAi38/KFw=
Subject key identifier: 19:54:37:56:84:ED:89:DE:C0:78:B9:9A:77:97:0B:F8:4A:4B:FF:F9
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 01963C1CF460A4ACF8694F5A61858230ED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 085B
Signing time: Wed 16 Apr 2025 01:00:52 +0000
Manifest this update: Wed 16 Apr 2025 01:00:52 +0000
Manifest next update: Thu 17 Apr 2025 01:00:52 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: gKMPyhDIFAn69TJ+nkApMYG3YPtePeyrY3iJYP+IkNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:f4:60:a4:ac:f8:69:4f:5a:61:85:82:30:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Apr 16 01:00:52 2025 GMT
Not After : Apr 17 01:00:52 2025 GMT
Subject: CN=1954375684ed89dec078b99a77970bf84a4bfff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:64:32:95:e5:17:4b:1a:6b:ce:ce:5d:5e:
03:db:f5:58:a5:f9:b2:0b:ac:e6:06:11:50:fd:c4:
b7:34:4b:b2:e7:5c:22:22:3a:7a:e6:1a:95:b2:94:
cf:7a:12:82:83:55:8c:27:a7:b0:13:a6:f3:a7:5d:
bf:de:24:66:21:e1:3d:0f:46:a9:da:28:f5:b9:2e:
d0:a7:49:fe:b8:9c:b2:b6:17:38:74:ac:62:40:6f:
4d:dd:1d:a7:ea:b4:d3:35:8f:cc:e1:56:1c:50:f4:
bd:65:4f:8f:97:d7:91:75:ad:b6:d7:92:e5:52:c3:
c9:f2:0d:07:8c:15:a4:0e:96:43:42:84:ad:cd:36:
a4:9f:3e:f8:1b:87:18:28:42:6f:75:00:c5:b1:aa:
e9:6d:1c:f8:1b:82:b7:58:8b:32:f5:2a:bb:32:dc:
70:c8:16:7a:77:d5:0f:67:1a:7d:62:2b:d7:25:1f:
b3:48:14:ea:d1:4a:6f:3c:f5:6a:2c:ac:fa:20:77:
23:15:32:16:e0:b7:77:e5:41:05:32:0b:fc:58:0d:
2b:3f:dd:c8:18:92:af:ce:ba:29:75:eb:69:8f:9b:
b2:69:a7:2f:a0:b6:6b:37:d7:12:dc:ec:8e:3f:ac:
d4:35:ec:0e:92:7c:c3:ef:56:bd:7b:56:7a:07:c8:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:37:56:84:ED:89:DE:C0:78:B9:9A:77:97:0B:F8:4A:4B:FF:F9
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0c:26:f2:c1:f0:b8:0e:42:1b:d5:da:ea:0f:ba:41:f4:77:
8c:c2:e3:3c:63:74:1b:15:99:bc:62:26:66:16:96:c7:b9:a8:
92:40:0d:99:7b:83:b9:f9:92:5a:be:6a:a4:66:27:bc:c0:2e:
a8:6c:5e:e4:10:cb:43:d3:c5:0f:9c:33:33:9e:45:00:69:ff:
ad:d6:e2:98:b2:f5:31:13:b5:b4:b2:71:77:09:b7:d8:75:10:
a9:fc:86:3b:40:ef:d9:95:03:44:ca:90:a1:12:2f:b9:2f:02:
3b:db:f0:bf:8e:43:40:71:1e:10:36:77:1b:5f:a0:09:50:fc:
64:6f:59:8b:a6:3b:91:da:a7:39:91:2f:f3:be:d2:d7:7f:9b:
d3:d5:59:96:cc:5e:5d:d2:f7:e6:ea:58:f3:5a:8a:cf:1c:4d:
49:8d:65:31:15:d0:76:72:2c:b4:d1:57:03:68:81:d0:8b:7b:
79:91:e0:10:af:4a:bb:16:39:61:ca:c0:45:48:c9:2f:0f:89:
09:b4:18:51:ec:9e:47:86:71:b6:1d:88:41:a8:1c:bc:c2:58:
a8:1f:f2:c6:27:d8:bb:07:60:a4:51:ca:28:20:54:e8:c3:6d:
c5:d8:79:ee:97:e4:17:fb:fe:ac:6d:52:27:e4:b4:0f:50:71:
e5:c2:45:a6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZY8HPRgpKz4aU9aYYWCMO2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWRjNmU3ZmYyZjIyYzQ5MDU3ZjdmZjMwN2VkODdlMTUw
OGVhMTEwHhcNMjUwNDE2MDEwMDUyWhcNMjUwNDE3MDEwMDUyWjAzMTEwLwYDVQQD
EygxOTU0Mzc1Njg0ZWQ4OWRlYzA3OGI5OWE3Nzk3MGJmODRhNGJmZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ZkMpXlF0saa87OXV4D2/VYpfmy
C6zmBhFQ/cS3NEuy51wiIjp65hqVspTPehKCg1WMJ6ewE6bzp12/3iRmIeE9D0ap
2ij1uS7Qp0n+uJyythc4dKxiQG9N3R2n6rTTNY/M4VYcUPS9ZU+Pl9eRda2215Ll
UsPJ8g0HjBWkDpZDQoStzTaknz74G4cYKEJvdQDFsarpbRz4G4K3WIsy9Sq7Mtxw
yBZ6d9UPZxp9YivXJR+zSBTq0UpvPPVqLKz6IHcjFTIW4Ld35UEFMgv8WA0rP93I
GJKvzropdetpj5uyaacvoLZrN9cS3OyOP6zUNewOknzD71a9e1Z6B8ixLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBlUN1aE7YnewHi5mneXC/hKS//5MB8GA1UdIwQY
MBaAFPjtxuf/LyLEkFf3/zB+2H4VCOoRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PM0c1Xzh2SXNTUVZfZl9NSDdZZmhVSTZoRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZTRmZTE3LTY5MDgtNDQwYi04NDRm
LTZlYTU4N2I3MWRkZS8xLzEtTzNHNV84dklzU1FWX2ZfTUg3WWZoVUk2aEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3L2U0ZmUxNy02OTA4LTQ0MGItODQ0Zi02ZWE1ODdiNzFk
ZGUvMS8xLU8zRzVfOHZJc1NRVl9mX01IN1lmaFVJNmhFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwwm
8sHwuA5CG9Xa6g+6QfR3jMLjPGN0GxWZvGImZhaWx7mokkANmXuDufmSWr5qpGYn
vMAuqGxe5BDLQ9PFD5wzM55FAGn/rdbimLL1MRO1tLJxdwm32HUQqfyGO0Dv2ZUD
RMqQoRIvuS8CO9vwv45DQHEeEDZ3G1+gCVD8ZG9Zi6Y7kdqnOZEv877S13+b09VZ
lsxeXdL35upY81qKzxxNSY1lMRXQdnIstNFXA2iB0It7eZHgEK9KuxY5YcrARUjJ
Lw+JCbQYUeyeR4Zxth2IQagcvMJYqB/yxifYuwdgpFHKKCBU6MNtxdh57pfkF/v+
rG1SJ+S0D1Bx5cJFpg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:44:38 2025 by rpki-client