Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
File: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft (raw, json)
Hash identifier: 4J1GvlGzk7KMTMX+75oXlrAdk7/Gfg7/i8ZbTJYU9ZA=
Subject key identifier: B5:DB:15:4B:01:F0:A6:7F:51:6D:C8:51:8E:DF:DA:99:9C:38:68:53
Authority key identifier: F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
Certificate issuer: /CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Certificate serial: 019921B1393922A51A932FABA0F68E0A98EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
Manifest number: 09DB
Signing time: Sun 07 Sep 2025 01:01:26 +0000
Manifest this update: Sun 07 Sep 2025 01:01:26 +0000
Manifest next update: Mon 08 Sep 2025 01:01:26 +0000
Files and hashes: 1: 1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl (hash: LQJLHty/EVA/ESsiUwtpPEtvA+P6HizZvd/n0bdwFUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:39:39:22:a5:1a:93:2f:ab:a0:f6:8e:0a:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8edc6e7ff2f22c49057f7ff307ed87e1508ea11
Validity
Not Before: Sep 7 01:01:26 2025 GMT
Not After : Sep 8 01:01:26 2025 GMT
Subject: CN=b5db154b01f0a67f516dc8518edfda999c386853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:f6:58:c6:fd:d2:f5:41:88:8b:e8:34:83:
5d:81:bb:53:f4:dd:fe:47:8d:77:de:3e:af:3f:0a:
8c:39:c4:c2:7a:15:5a:b6:9f:15:76:a2:77:7d:92:
64:96:c4:cd:b4:0e:ce:88:94:d8:a0:54:ab:9f:65:
ed:64:6a:42:8b:09:e6:01:89:60:1d:8b:50:42:97:
33:e7:05:83:fc:6e:e0:c3:84:a0:5a:ae:9c:06:c8:
e8:22:38:59:9e:b7:a2:bf:3c:f7:1c:3e:ed:e7:21:
86:29:6d:8d:bb:f6:69:63:ce:a4:e3:55:ab:75:eb:
35:3c:3b:f2:60:48:e2:bf:9e:bf:ab:c5:89:ee:cd:
1c:0c:07:d0:25:9c:e8:8e:98:cf:eb:39:b1:cc:26:
e7:5e:ce:64:fa:49:dd:74:ab:5d:c5:02:ee:9a:f3:
af:d3:e5:62:37:25:22:cb:c7:88:92:13:f4:05:c6:
45:52:6b:d5:a2:db:03:23:7c:b2:66:10:7c:7e:eb:
45:11:c5:22:59:66:94:a5:fa:a1:4b:0e:b5:5e:b9:
34:48:d5:1b:22:cb:96:fa:3d:c8:1f:b9:24:2a:34:
b3:de:93:fa:0e:59:9d:b6:05:85:d4:05:e7:b4:c9:
51:fa:40:df:fa:0a:fb:00:66:5a:f3:5f:0d:d2:c9:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:15:4B:01:F0:A6:7F:51:6D:C8:51:8E:DF:DA:99:9C:38:68:53
X509v3 Authority Key Identifier:
keyid:F8:ED:C6:E7:FF:2F:22:C4:90:57:F7:FF:30:7E:D8:7E:15:08:EA:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e4fe17-6908-440b-844f-6ea587b71dde/1/1-O3G5_8vIsSQV_f_MH7YfhUI6hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3c:00:d3:11:47:7e:93:96:af:b2:43:cc:45:56:36:a3:2b:
ba:03:76:4b:e1:f5:e2:f0:ee:a2:f3:b1:b2:1a:4e:bf:81:1d:
5d:54:65:c9:dc:4a:e0:a3:b5:f9:e7:89:8d:59:a7:fd:8c:bb:
30:fa:a6:8d:9d:ef:30:78:9f:ee:17:67:db:57:7d:84:ad:7b:
e4:ca:9d:0a:b0:ff:97:bc:30:07:80:ee:b9:a6:1d:c8:1d:d2:
27:88:de:c6:6b:30:5e:6f:9a:3d:fd:a9:dc:a2:d5:7d:eb:57:
93:ef:c1:08:bc:8a:d0:77:f0:ba:11:03:fa:69:11:07:8a:e7:
e0:90:3f:56:0a:a5:be:ae:52:ad:04:ce:0f:c7:78:ec:be:5c:
0e:b7:3d:1c:a2:c0:53:59:d1:22:98:39:f1:22:11:d3:9c:d1:
2e:ce:71:96:3f:af:35:55:17:9d:78:f8:b8:61:cf:ea:b8:4c:
56:e8:03:b8:5d:bf:1f:1d:73:95:46:fc:c4:31:52:c4:08:91:
6d:9f:77:41:6f:e0:68:52:7c:3e:c7:1a:75:a6:02:35:a9:09:
f7:a9:0f:71:56:c3:c4:93:a8:03:af:c4:56:57:5d:03:0d:f4:
1e:c5:67:43:93:81:69:24:96:be:ed:53:f4:d9:60:b8:e6:61:
7f:05:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:29 2025 by rpki-client