Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: gKsLPai3wwVPIMT3t08OPE3PDhCl9VqeFo4b+a8Qm1c=
Subject key identifier: F9:C5:F6:09:E3:35:BF:98:78:00:52:4E:0E:7F:32:74:AC:31:FD:F6
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 01974E576BCAEA77AB90DFEB0D87A460B9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 0FAA
Signing time: Sun 08 Jun 2025 07:00:41 +0000
Manifest this update: Sun 08 Jun 2025 07:00:41 +0000
Manifest next update: Mon 09 Jun 2025 07:00:41 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 2mDsM2F77J9cP5MJd2+OQSKXofEZsykGDbmTiMHc860=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:6b:ca:ea:77:ab:90:df:eb:0d:87:a4:60:b9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Jun 8 07:00:41 2025 GMT
Not After : Jun 9 07:00:41 2025 GMT
Subject: CN=f9c5f609e335bf987800524e0e7f3274ac31fdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:43:53:31:bb:02:88:d7:f0:f6:db:6f:27:
b9:e0:09:26:4c:f6:ca:c8:ce:e1:47:11:95:1d:7c:
4e:4e:17:49:2a:a2:05:15:45:2f:58:79:c0:58:68:
0b:db:1a:67:87:b4:86:49:ca:3e:ff:9b:77:ad:71:
e0:96:da:a8:40:76:53:36:97:78:0f:a0:72:0c:87:
3f:6c:85:66:84:d0:1c:04:13:2c:e5:94:6a:45:6e:
77:7e:9c:00:6f:8e:e4:3c:9f:95:81:71:1a:b7:41:
c3:b8:a8:8a:32:de:81:68:3e:f8:f5:ea:bc:9c:3d:
62:8a:27:b9:74:75:e9:5e:4c:bd:df:99:23:cf:75:
e9:cc:78:d9:ef:bf:db:a2:f2:27:9a:b9:06:9b:4f:
ee:45:5e:2d:74:a7:46:d9:96:d8:24:95:a5:8f:83:
e4:90:1a:fb:94:d0:3b:9b:d1:b8:07:63:af:89:67:
0b:e8:c2:d7:3a:86:84:4c:dd:87:68:be:25:b7:7c:
47:de:cf:2a:6e:56:a9:5d:e4:60:0e:0f:85:ba:11:
e9:42:85:e2:83:ff:15:7a:69:7c:f9:a0:46:c4:4d:
5e:2c:db:29:e3:cd:aa:74:27:28:ff:3b:4b:c1:b9:
2d:f3:0f:e7:d6:e2:cf:e5:19:a1:9d:5f:f0:a3:4a:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:F6:09:E3:35:BF:98:78:00:52:4E:0E:7F:32:74:AC:31:FD:F6
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:82:b5:44:9a:9d:61:d8:6b:73:10:1b:0f:23:b3:eb:77:
9d:5d:2e:ba:12:c9:b1:97:af:21:f3:01:ef:97:dc:69:67:6c:
c7:1e:5e:36:b5:44:fa:ac:7a:b6:67:b3:ee:ea:c1:77:2d:0d:
18:6c:ec:41:85:e2:bf:3c:93:03:b1:08:2c:25:c0:48:d2:11:
36:38:1c:04:36:70:96:d1:cf:c1:c9:d0:ea:50:ea:5f:3f:7b:
b7:63:1b:64:b8:f1:39:8d:e0:8c:41:76:ab:7a:26:06:33:c5:
f7:63:a5:fa:d1:d0:60:0d:21:20:58:b2:36:b9:bc:e2:d5:a5:
ed:2a:17:6e:f7:71:01:ef:fc:29:56:41:b3:a4:11:7e:d6:22:
91:47:ef:fd:10:58:29:d6:4e:6d:fc:b2:8a:ce:8d:2b:ad:b3:
9c:6a:0c:c7:55:d0:ad:9e:e4:af:ec:ff:e9:8e:e8:90:60:6c:
55:b1:fc:77:34:8c:02:ef:b1:82:5c:04:45:b2:fa:0e:38:e8:
b2:ca:a5:98:5d:d2:b2:e1:d8:87:d2:1b:74:d2:87:63:9d:34:
8b:dc:f1:46:db:a8:c2:38:4a:33:82:b7:51:62:07:31:32:e4:
14:34:7d:07:68:04:9f:ee:1b:46:e8:e4:90:44:dd:0d:45:df:
00:63:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:37 2025 by rpki-client