
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: K2sR4rhdIoSTKi2VmhXZhFq0DUwavp9LYDTBtjYLj60=
Subject key identifier: 3F:3B:9A:67:93:6F:1C:CD:C2:68:05:AA:A3:28:04:58:D4:F6:22:40
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 019745C2513961D4D94EEEC651F7C2DCFE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 0592
Signing time: Fri 06 Jun 2025 15:00:52 +0000
Manifest this update: Fri 06 Jun 2025 15:00:52 +0000
Manifest next update: Sat 07 Jun 2025 15:00:52 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: w8cBn5Mel2SvxVRFB19K8Qz+T7mfyxNwi4S46432lsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:51:39:61:d4:d9:4e:ee:c6:51:f7:c2:dc:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Jun 6 15:00:52 2025 GMT
Not After : Jun 7 15:00:52 2025 GMT
Subject: CN=3f3b9a67936f1ccdc26805aaa3280458d4f62240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:05:7b:c9:ab:d4:14:ab:08:55:3e:07:2d:
a6:3b:63:2f:f1:78:bf:9c:10:40:f0:64:bc:3b:27:
3c:6f:75:11:eb:a5:d7:a5:68:af:04:95:21:c9:c1:
c2:0e:2d:cf:dc:58:4e:7e:b1:d9:f8:14:2d:5c:51:
bb:89:af:1e:6a:ce:8a:b1:8f:13:c1:bb:de:51:15:
a6:17:6f:2d:36:ce:19:1d:3d:f8:53:6b:04:b9:30:
50:69:c5:cb:84:a5:ac:0f:0f:93:cf:55:43:79:cc:
8f:21:62:11:bc:77:3c:56:89:8b:52:72:5c:99:2b:
7e:d0:7e:90:a6:ba:75:ff:c7:21:10:36:cb:9d:73:
ec:d3:01:df:a1:6a:21:16:6e:7a:ff:06:81:3f:43:
ad:00:56:fb:aa:e2:d3:83:9a:64:b9:8b:00:9f:bc:
f0:64:58:fe:4b:2a:0d:bd:1c:c9:4c:2a:e5:aa:27:
24:f6:72:e9:b1:85:9c:3d:3d:02:e3:a2:41:26:5e:
c9:6c:94:9c:89:1c:81:0d:bd:37:fd:1c:c4:05:47:
05:c6:e6:28:03:56:53:f9:bb:15:03:ba:ff:03:20:
f7:02:ac:44:33:c7:05:b4:a1:9e:b3:19:88:d4:58:
e4:e6:bc:15:fb:b6:e5:12:45:5c:98:6f:0d:80:c6:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:9A:67:93:6F:1C:CD:C2:68:05:AA:A3:28:04:58:D4:F6:22:40
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f6:aa:fd:5b:ba:87:ca:07:5e:66:9e:57:a2:be:bd:84:de:
4f:25:12:56:b1:d9:59:96:bf:1a:77:74:21:2b:68:6d:75:b0:
48:fe:94:e6:79:f5:57:6c:85:37:11:25:b0:95:25:5b:e4:d6:
a2:0b:70:70:22:db:04:e7:af:af:a1:5a:35:58:0b:f1:63:5d:
a5:f3:89:0a:14:de:fc:50:9c:ab:5c:81:1f:2c:ee:d1:fb:6d:
16:e3:72:24:28:4b:2f:fe:4c:ee:e9:0a:25:4f:61:7f:43:f2:
0d:9c:86:55:c4:b9:b0:87:10:7a:59:67:f9:f1:01:d3:6f:2e:
35:4e:df:e1:12:56:d6:f7:7d:cc:1a:e1:d7:d5:ca:5d:ff:d4:
89:74:c5:cf:e5:c2:66:d3:02:43:26:31:fa:aa:03:40:f3:90:
ed:c5:80:73:7d:ef:b2:e4:f8:30:4a:eb:21:17:82:f6:40:87:
f7:e9:5c:23:45:12:87:a7:c0:9c:6d:0f:ee:61:e0:17:0f:54:
27:b5:16:7c:c0:6c:71:95:bd:43:5b:7d:c1:3d:86:39:ad:84:
11:79:48:09:12:3f:00:bf:e0:74:ae:1d:c7:49:93:ab:cc:d8:
70:0e:cd:90:9b:2c:d8:37:e7:62:46:7f:48:10:a8:35:c5:d3:
53:e7:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:06 2025 by rpki-client