
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: Ov1+rAd5zM255Vw+UC0GMLSwhC9li5etUSVo/nmM+G4=
Subject key identifier: CF:10:2A:A5:E6:83:42:1D:36:30:37:D2:88:21:21:73:FC:38:63:D8
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 0197488CD0309A86274B0B143E2D9BCEE264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:01:17 +0000
Manifest this update: Sat 07 Jun 2025 04:01:17 +0000
Manifest next update: Sun 08 Jun 2025 04:01:17 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: y8A6dOMAukaIdsA/I2Wqkq3sAGh3JwoheKsQYFO87FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d0:30:9a:86:27:4b:0b:14:3e:2d:9b:ce:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Jun 7 04:01:17 2025 GMT
Not After : Jun 8 04:01:17 2025 GMT
Subject: CN=cf102aa5e683421d363037d288212173fc3863d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:fa:84:24:31:10:49:9d:23:da:66:46:75:
5f:44:3e:d4:d5:61:f8:e6:9f:80:7d:e5:2a:a1:96:
56:a5:ff:bc:35:3a:d1:b9:60:5a:d8:81:95:42:38:
23:4c:25:f3:20:95:1a:30:ec:83:1f:28:3f:d1:17:
56:8a:93:b0:fd:9d:14:a6:a1:cf:dc:e3:58:9f:23:
86:19:c5:28:79:1c:e5:e0:9c:4f:0f:79:dd:8b:2a:
db:c0:c9:27:af:de:0b:13:0c:ee:ef:79:a7:db:07:
59:57:74:18:65:81:c2:ea:02:99:60:ca:23:77:18:
b7:fc:92:c9:ca:f7:48:05:c1:f0:ae:9e:9a:2d:bc:
98:61:75:eb:90:a4:1d:2c:6f:97:04:a9:0d:cb:cc:
5e:a3:38:d5:e5:4a:ab:db:5c:72:66:59:b8:48:e6:
de:1f:bc:b2:1d:7b:67:90:e8:8a:4d:af:1d:17:8b:
29:97:e5:35:47:77:67:e7:43:62:4f:62:be:71:7a:
1a:e2:c9:33:86:db:cd:63:d3:5b:1a:0b:c1:24:7f:
38:08:99:8f:a6:d4:c7:28:52:21:bb:d5:4d:91:88:
7c:b4:ae:33:d3:6d:ab:73:07:df:32:ca:c1:26:68:
e2:21:8e:ed:b8:0e:bc:41:04:d2:fe:7c:f4:74:84:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:2A:A5:E6:83:42:1D:36:30:37:D2:88:21:21:73:FC:38:63:D8
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9e:5f:11:da:f0:de:c3:ce:1f:ce:5f:a6:bc:3b:3c:eb:86:
c7:7c:68:ce:8d:b7:25:ad:fb:45:57:e7:4b:03:8b:d5:d5:b3:
fe:57:91:7c:52:46:52:2d:19:41:06:86:cc:fb:9b:4f:39:76:
ee:77:9d:e4:0b:8e:8f:d9:4b:1d:c3:ab:1f:a4:59:c6:18:1e:
75:29:ac:1b:69:52:e1:a7:3e:00:9a:1f:1c:73:a9:b0:be:20:
33:09:aa:3a:4b:6d:3d:ba:a4:81:72:ed:ab:9f:c2:f5:17:bc:
4e:7c:20:94:2e:1d:de:51:04:80:f9:91:8f:e5:1b:4e:d9:ed:
bd:9f:8e:c7:60:79:70:9f:2e:ab:19:8d:6b:d2:5b:a9:51:4f:
39:25:48:21:90:89:e5:b0:d6:96:27:5e:cb:89:45:a1:4e:7d:
51:ca:ad:3f:c1:4c:ff:70:7e:2f:38:0a:6e:88:c6:00:e0:00:
d8:00:69:40:67:c3:a7:9a:57:a8:e0:3c:5b:fb:53:e8:54:b1:
02:7a:a7:b1:2c:71:5c:d8:08:d6:0e:72:fc:19:33:6d:f6:5d:
30:a7:cc:31:59:a9:12:02:7e:27:26:9b:7d:94:fb:d4:a4:2a:
f3:25:7e:5b:53:37:bc:2c:a5:28:63:81:ba:35:8d:58:48:b6:
bc:3f:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:29 2025 by rpki-client