
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File: fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier: DBOMrQties7au6FnYl1WzOVHW82/3OkXspwkZZIuvgA=
Subject key identifier: 19:E7:05:DE:43:BC:BD:2E:FB:ED:2F:B3:C4:26:7D:27:58:36:BB:BD
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer: /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial: 0199228CF71719AB5197B6AD8E29924E8991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number: 1588
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: BgkGQlKn5P4so/SfgLlxRS7tc+ngSnFvBFbQ8RbMtgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f7:17:19:ab:51:97:b6:ad:8e:29:92:4e:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=19e705de43bcbd2efbed2fb3c4267d275836bbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:d9:0e:36:e4:30:8c:f3:66:b4:95:e4:c3:
7b:85:f3:b2:e1:95:4e:4b:2e:83:02:bb:c1:df:d6:
9f:09:2f:f7:7a:8c:c5:59:34:31:d9:70:5c:87:95:
35:ab:ac:9d:dc:f1:18:8c:23:6f:af:34:49:69:da:
67:2f:33:cc:da:de:ef:01:25:aa:ec:71:c2:d2:bd:
01:d3:43:4b:76:62:38:97:83:c0:a4:8b:22:c4:1d:
cd:9c:19:67:e7:18:f6:91:48:02:06:fc:1e:86:be:
be:75:55:9b:95:cb:b3:af:5a:3b:20:d7:b6:ae:0f:
81:3b:70:54:f0:12:3d:32:d0:fd:d5:8e:fb:24:2e:
e6:4f:ff:c4:1d:41:cc:5a:42:ab:e7:9d:c5:98:35:
77:de:63:ed:6a:53:0e:f2:e1:0c:35:7e:94:06:f9:
e6:26:4e:6e:ab:13:6c:51:bd:64:44:5f:93:4e:06:
1e:68:01:a0:cd:04:54:83:dd:6a:49:e2:db:45:bc:
0b:2e:f9:4d:6f:fc:20:ad:c6:82:da:5d:b5:f1:a0:
48:60:dd:01:75:25:80:f2:60:ba:22:5d:b4:6c:40:
0e:11:45:71:73:ce:12:3c:2e:80:ef:fa:ac:98:02:
0a:cf:31:93:eb:31:c0:48:4e:d7:93:5b:86:86:cc:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:05:DE:43:BC:BD:2E:FB:ED:2F:B3:C4:26:7D:27:58:36:BB:BD
X509v3 Authority Key Identifier:
keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:da:8b:27:2b:64:36:c1:57:6f:a7:62:a4:43:4e:d1:6a:
c3:3a:73:ca:6b:d8:82:b8:54:53:b4:46:06:ef:a3:2d:31:65:
bd:66:ac:df:fb:e4:65:40:e1:0f:3f:b9:48:b2:d7:03:7c:58:
33:f7:4d:fb:de:ef:94:f1:46:40:40:fa:53:15:f2:6a:57:14:
bc:fe:10:34:7b:f8:0c:1f:5b:88:2a:f5:8c:ec:55:b7:36:76:
a7:83:2e:3a:ca:84:66:db:fb:d7:ac:14:91:0f:9e:87:12:6c:
27:eb:4a:c4:19:94:84:ba:5a:13:d7:a9:06:e3:cf:dc:1d:b2:
56:82:1e:f3:50:a1:43:4e:21:61:d6:f8:9d:f1:2b:b1:db:5e:
3b:fe:84:9b:ac:ad:5a:15:e6:b7:2c:83:85:bf:3a:7d:aa:3f:
17:3b:8e:4e:a8:6a:d3:4b:9c:41:14:32:24:af:7c:b9:bd:fe:
4f:b2:60:1f:98:6d:ba:b8:83:90:78:d4:ef:b8:2f:83:a0:a5:
f9:c1:39:5e:be:87:7e:8d:fd:8c:62:81:f2:e8:87:ab:4c:a1:
07:8d:44:6e:9d:a3:b6:25:ee:03:85:ee:b2:90:c0:ad:8f:ae:
9f:31:be:3f:93:84:de:81:61:ac:5f:47:fc:1d:45:1e:e6:b8:
88:57:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:05 2025 by rpki-client