Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: sgl7tJyjALa94zZbR2xby6i4gzjFDkWM8f9LwTn9EY8=
Subject key identifier: 11:21:67:FC:48:F5:3B:8A:7A:27:C1:2B:92:AE:63:80:CC:30:CF:31
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 019848C051F739654A3427399E94C400A64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0F25
Signing time: Sat 26 Jul 2025 22:00:20 +0000
Manifest this update: Sat 26 Jul 2025 22:00:20 +0000
Manifest next update: Sun 27 Jul 2025 22:00:20 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: FpB6m7YoRUNclBj6D2ZPIWt24nXj+ClqZPvtxEqfmAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:51:f7:39:65:4a:34:27:39:9e:94:c4:00:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Jul 26 22:00:20 2025 GMT
Not After : Jul 27 22:00:20 2025 GMT
Subject: CN=112167fc48f53b8a7a27c12b92ae6380cc30cf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:a4:76:f5:a7:6a:97:c7:a1:be:f2:b6:81:
cf:3d:5f:9e:04:1e:f2:74:51:86:61:58:dd:8c:73:
83:9a:26:9d:90:f0:39:c4:30:52:73:4f:de:41:50:
b3:fa:7f:52:3a:f4:6a:ca:26:c1:27:fc:60:48:bd:
98:9a:7a:c8:ac:4d:19:42:12:9d:d5:0c:d5:3c:05:
3e:81:8a:ac:98:6b:c1:8c:d7:78:ed:5d:b0:6c:a9:
63:71:7c:1b:b6:02:dd:99:d9:cc:79:4f:ce:83:c4:
96:9d:c7:08:39:ee:89:af:d2:20:ff:b3:50:b1:78:
03:41:4e:be:7d:ec:88:98:71:e4:49:ba:ac:60:6e:
bd:21:69:67:33:12:d7:19:6f:7b:65:3e:92:20:59:
99:a6:6a:38:e3:14:0b:2b:1a:55:1e:4a:4c:98:ad:
2d:1c:f7:6e:c7:7a:f6:4e:4a:87:76:38:8f:39:34:
22:17:99:7b:c0:6f:f9:a9:21:1b:f3:13:50:b4:7d:
48:4e:d3:c0:6e:57:fc:84:c0:fd:6a:d8:91:fa:cc:
da:de:56:23:e2:d4:5f:ee:57:fb:ba:7b:76:0f:19:
cf:ea:81:8e:92:39:96:a5:2a:63:49:50:07:ca:4b:
cc:71:97:df:b5:da:ce:60:12:4e:4a:36:66:2d:5b:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:67:FC:48:F5:3B:8A:7A:27:C1:2B:92:AE:63:80:CC:30:CF:31
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:49:f1:8e:52:0e:91:46:3a:90:99:d6:da:65:e9:34:7b:65:
1f:74:8c:ea:10:82:e3:63:00:5c:c1:89:0d:bb:c1:90:37:9d:
0d:fd:e9:78:78:a9:c8:cb:14:05:b3:c1:ef:d2:76:db:52:0b:
3f:0d:a1:c0:8b:6a:32:ac:a7:92:08:d2:cb:f8:59:2a:58:07:
61:25:69:f9:3e:7b:61:a2:bf:8f:d3:97:f9:0d:20:c9:17:7b:
98:48:db:6a:ad:75:cd:e9:7b:2d:e4:4a:1a:a1:1a:9a:60:1c:
ef:78:f4:93:24:73:90:85:74:65:1e:45:da:44:b9:32:7e:73:
e3:39:5d:b1:b3:7e:9a:92:08:31:b4:15:da:b9:a0:2a:bb:3b:
01:13:91:1e:0c:6d:7f:f3:a2:99:28:5c:51:e1:78:1a:db:3b:
a6:93:2c:c7:74:12:bb:42:fb:bc:f2:b5:ea:d8:3b:a6:2e:a4:
08:36:84:34:dd:b3:4d:97:7d:db:a5:55:1d:be:88:ea:a6:4a:
3e:d9:56:70:44:3a:8b:d0:fa:60:d9:f3:50:8b:71:55:72:43:
fb:0b:c4:dd:8a:e3:5f:f5:36:61:ea:27:7a:86:8f:88:3d:ae:
24:c1:78:8e:a6:fa:71:55:85:3f:43:06:21:01:8a:ba:7a:c0:
4f:9c:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:21:43 2025 by rpki-client