
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: /cn2LbbPANL+QADCF0vE38D0i6jCOAQD3MufbaJdZbY=
Subject key identifier: EA:E4:6A:BC:68:F4:16:03:8F:D5:4F:60:DE:7D:08:06:EA:7A:30:DC
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019849668127FF4B44A97E8F441A084D45C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0930
Signing time: Sun 27 Jul 2025 01:01:51 +0000
Manifest this update: Sun 27 Jul 2025 01:01:51 +0000
Manifest next update: Mon 28 Jul 2025 01:01:51 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: DBqFwC3hGgHI/EFI7LbqbjScx2LiUg6kVR4gIlHPtZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:81:27:ff:4b:44:a9:7e:8f:44:1a:08:4d:45:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Jul 27 01:01:51 2025 GMT
Not After : Jul 28 01:01:51 2025 GMT
Subject: CN=eae46abc68f416038fd54f60de7d0806ea7a30dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:65:72:a9:21:55:1b:0e:0e:e5:b7:ac:a7:
48:64:5b:3c:f9:4b:20:f2:01:f8:0c:31:48:03:05:
0d:c9:77:d5:6a:98:dc:5f:50:6d:62:62:39:8a:8b:
a7:43:5f:42:4d:05:b6:f2:e7:99:fa:bb:d0:8a:75:
7a:26:c7:62:ab:9d:6a:71:df:f7:f0:6d:8b:e6:8a:
bb:51:9a:71:b8:9e:f9:42:71:4a:20:9b:c1:ef:3d:
96:14:ce:9a:5d:dd:90:9d:6b:9d:cd:2d:7b:a2:24:
7a:55:25:c8:99:0f:77:83:7c:4f:f8:d2:c6:75:e5:
9d:82:61:0d:f2:30:7c:85:b0:f6:6b:a2:06:e0:47:
ae:e0:cc:bf:c1:b6:cd:94:3d:b5:96:45:2d:c2:1b:
d4:0c:62:ac:ea:91:da:10:4c:17:6a:1f:2a:00:1c:
b3:c0:8d:96:23:4a:c7:9d:0f:42:dc:40:03:e9:c2:
1c:18:32:6d:dc:2a:a3:db:09:60:14:a2:07:f2:83:
1e:21:3a:88:72:b8:78:8e:af:ff:26:91:18:29:a7:
4b:a2:74:81:8b:75:17:da:90:a2:e4:5f:03:27:0f:
28:e4:54:1a:d3:f6:7a:7b:f2:d1:fb:21:36:72:ea:
d2:54:37:69:8f:d3:bb:cb:7f:28:cc:0f:af:25:1c:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:6A:BC:68:F4:16:03:8F:D5:4F:60:DE:7D:08:06:EA:7A:30:DC
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:f8:6c:c0:36:b3:9c:51:85:f3:22:3b:c1:ec:f1:6c:dc:
07:e2:7e:11:af:12:6b:e3:b8:51:4a:fd:41:60:66:13:1c:7c:
96:2a:5c:e3:aa:15:9a:8f:ee:f8:a3:f9:db:04:8b:63:18:ad:
39:2b:1d:86:1b:d9:8a:bd:ef:e0:d1:95:51:f3:a5:91:4b:62:
70:b9:26:f6:e1:33:86:11:56:2e:17:ee:39:a7:f9:f0:fd:06:
6d:91:3f:ae:76:d1:62:ed:de:96:2c:7b:54:f9:2d:60:80:6c:
48:1e:dc:aa:6e:b0:f9:ca:06:15:67:42:1c:6d:46:37:e1:88:
7e:e3:97:ea:d6:f9:ab:a1:f2:fc:d7:7b:43:d1:f9:23:36:65:
fe:87:e2:40:df:b8:c9:eb:c4:aa:d8:9a:35:f7:f5:fd:87:b6:
fb:e8:c4:70:60:a7:0a:5d:d1:d1:27:be:27:6e:d4:b6:cd:30:
67:06:06:bc:06:a0:5c:00:b9:79:2c:aa:0a:39:d4:d5:cb:30:
3a:3f:94:e2:d3:01:1c:c0:9d:3a:ae:53:47:0d:31:c6:10:20:
1f:d6:db:ef:cc:b5:08:5e:b6:b1:d5:36:40:5c:00:75:c6:68:
3d:07:e9:c7:4f:50:af:ec:bd:36:9b:5b:4b:a2:63:5e:c7:94:
66:17:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:31 2025 by rpki-client