Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: E/arf5XGs1pB1+PRbj6o2DgIpiTtuCPf0dkDEejtyL8=
Subject key identifier: 4F:16:4C:40:6F:FE:96:7E:42:2F:B5:00:E2:39:D2:D3:28:86:26:5F
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 01984B54D94C7176BDB85AE01CA73835BA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 1180
Signing time: Sun 27 Jul 2025 10:01:48 +0000
Manifest this update: Sun 27 Jul 2025 10:01:48 +0000
Manifest next update: Mon 28 Jul 2025 10:01:48 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: eokamBJkboj+E9mEztm+a9m4hhuExNWGsDyx0WnWUuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d9:4c:71:76:bd:b8:5a:e0:1c:a7:38:35:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: Jul 27 10:01:48 2025 GMT
Not After : Jul 28 10:01:48 2025 GMT
Subject: CN=4f164c406ffe967e422fb500e239d2d32886265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:76:49:11:44:3a:6a:35:f3:2c:98:b0:79:
86:b4:a9:a9:17:41:a4:d4:fa:e1:2b:01:ae:af:cc:
eb:af:23:80:54:b1:2d:7a:50:c8:1a:b8:8f:32:c7:
00:cf:47:fa:6c:f4:b8:4d:6b:7d:91:28:97:e5:c2:
5b:0a:17:8f:cc:97:ce:d0:4a:0b:60:44:3d:2e:8b:
96:47:b8:26:c2:6c:e7:c8:4d:2e:b5:4e:f5:34:34:
87:b3:57:58:69:a2:6f:79:1f:a3:4f:11:74:9f:76:
f1:6d:4c:3c:9d:5d:26:c7:4b:80:64:3d:19:ac:b6:
03:b4:58:7d:f4:fe:57:3e:83:d5:38:9f:81:49:e9:
56:45:d9:67:ae:ea:eb:ce:8e:42:e1:36:fa:5c:9e:
1e:1d:d9:cc:85:af:d8:c1:88:33:e8:c5:82:12:9f:
ff:e6:b0:b1:aa:98:55:eb:d0:66:46:3b:83:92:60:
af:d9:6a:79:26:3e:08:49:78:6f:bd:2e:f8:a4:de:
ba:91:fc:74:66:08:01:2b:bb:1e:46:59:9a:06:5f:
86:84:d5:0b:a4:67:46:e0:65:eb:3b:43:4f:63:d1:
a1:c3:50:49:fc:58:0a:8f:96:b7:0d:b6:cf:9d:62:
5e:8b:e6:e9:74:a0:9a:c9:6a:d9:99:6b:39:95:d3:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:4C:40:6F:FE:96:7E:42:2F:B5:00:E2:39:D2:D3:28:86:26:5F
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:10:03:f8:73:d8:75:65:28:c1:4d:aa:c2:a0:5b:89:1b:42:
67:fc:a4:03:1e:cd:89:33:cb:c2:b8:46:25:f8:20:e8:b1:74:
d7:e7:88:77:f0:9e:68:fc:37:e6:2b:73:ff:d1:c6:b0:b8:1d:
29:43:72:f6:f2:60:87:df:94:c8:95:f7:21:ff:93:9b:bc:d7:
27:f8:a6:7a:7d:3a:a9:70:08:fe:33:46:ea:a2:d4:b4:73:0e:
8f:a9:7f:26:bc:42:b2:46:2f:6a:78:3a:99:e3:fb:02:b6:33:
a2:6e:95:e6:90:c0:ed:ee:c8:3a:61:fe:39:c8:93:de:e2:e1:
63:a2:55:74:ae:3a:60:e9:de:28:1d:70:0c:08:b8:b9:20:c1:
15:df:7d:4f:09:ed:42:ae:d3:39:37:b4:e4:10:38:41:76:26:
13:73:56:fb:50:71:61:ba:cd:01:6b:d2:6e:d2:e0:39:95:16:
96:4a:6d:7e:26:27:2d:0e:2e:05:45:84:82:f8:13:f8:b8:62:
1d:1a:a5:cb:db:9c:27:b7:38:34:be:16:4b:0c:70:fb:26:3c:
2e:34:31:7a:00:f0:6f:85:d8:d7:49:15:02:c6:06:98:00:9a:
74:33:47:4c:54:f7:73:ad:38:6d:fc:8e:f2:b0:19:b6:23:00:
2b:e6:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:01 2025 by rpki-client