Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: 9b/5TzMHn92187pPNpr9orKL9sS0Tr0bxB34WqHQXoo=
Subject key identifier: 92:12:DB:40:2E:42:50:1C:81:20:9D:07:1E:E3:F5:0B:1F:8C:53:F9
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019847E4CF9BA33A3FD0D4782DF7BCC1EA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0CE5
Signing time: Sat 26 Jul 2025 18:00:34 +0000
Manifest this update: Sat 26 Jul 2025 18:00:34 +0000
Manifest next update: Sun 27 Jul 2025 18:00:34 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: NXfpDFInqMCTEZtpsfJj1WAoDynDOAulcyqP9EDfFyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:cf:9b:a3:3a:3f:d0:d4:78:2d:f7:bc:c1:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jul 26 18:00:34 2025 GMT
Not After : Jul 27 18:00:34 2025 GMT
Subject: CN=9212db402e42501c81209d071ee3f50b1f8c53f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:16:eb:c9:db:45:88:51:29:4b:a2:9f:0f:
9e:c7:a4:53:a9:71:1c:18:0f:59:50:15:94:ff:8a:
be:08:50:96:62:dd:34:7d:e2:f7:fb:e3:a9:72:84:
35:d4:06:5e:be:e9:ed:51:fc:6e:92:7b:aa:32:e1:
45:44:62:f6:32:27:e3:fd:1b:bb:2f:4a:d8:52:54:
4a:db:d6:5f:19:95:d2:39:28:21:1b:2c:22:41:99:
c0:6f:ff:72:f6:02:2c:73:fe:dd:db:de:d8:77:fe:
d7:d4:5c:2b:b7:c6:80:4e:24:26:17:f5:8f:c2:ec:
d8:5c:0a:fb:38:56:f0:47:1d:ac:9f:94:3d:c4:6d:
69:a0:9b:af:d7:e4:02:36:fb:4f:9e:57:bf:60:b8:
df:7a:12:53:e1:77:6f:78:fe:68:d6:fd:6a:6c:4e:
3f:80:03:48:27:74:c4:d3:e0:cc:f2:a4:56:e4:a1:
b6:af:4f:32:36:36:15:22:40:8a:0c:d6:c0:27:0a:
5b:0e:a3:3e:de:7b:bf:87:9a:cc:6e:bd:c1:c6:17:
e6:44:57:9e:c6:57:f5:bb:af:2e:bf:c9:be:d7:f1:
a8:d3:8e:1a:20:7b:5a:2f:34:a8:4e:20:28:a4:d7:
f1:6d:66:6d:8e:d9:d9:37:25:a0:ad:ee:ff:30:ff:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:DB:40:2E:42:50:1C:81:20:9D:07:1E:E3:F5:0B:1F:8C:53:F9
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:9c:b5:50:2d:d7:f4:c6:18:99:5c:27:f4:dd:9c:17:88:
c1:1c:ab:ce:ff:27:0f:81:92:45:eb:c5:b1:51:f1:39:41:b2:
9b:2d:59:de:88:26:65:47:61:67:53:68:53:a2:ec:65:e4:28:
2d:f8:06:8f:81:2b:df:cb:94:c7:17:c7:49:bd:2b:b3:3e:63:
25:0e:9d:49:7c:83:b8:24:e5:57:bf:35:d2:23:15:17:81:dd:
71:f6:ee:fa:6c:85:64:d0:a8:e8:ed:0d:e7:02:d7:7c:a4:64:
18:67:a8:2e:49:f7:57:90:47:ac:4a:9d:d2:61:49:99:82:fd:
1a:2b:75:76:4d:79:c7:6e:d9:bd:ef:d1:50:c3:51:c4:27:9e:
f0:0b:eb:a3:b3:d8:2f:0c:ee:61:58:b7:10:07:ec:10:2f:17:
62:b5:c7:a7:1b:8d:f8:7c:61:7c:67:7e:fa:9b:ad:7c:2d:d3:
28:da:7a:14:cb:10:c7:e3:ed:bc:df:cd:57:f3:2a:4a:7b:8f:
52:93:3f:1e:40:cf:9e:15:d6:3a:d5:b6:d0:38:40:ca:f8:6f:
70:ba:95:11:a6:97:97:fd:e8:a6:d5:6a:ab:ff:8e:b9:45:63:
91:28:85:36:2a:95:63:84:17:7b:84:4a:9e:59:53:cc:03:04:
fd:b4:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:53:24 2025 by rpki-client