Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File: G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier: Lev7OOsHd4jOj56sNTZaCxCWIVInSUH1xvEyYgQ9sJA=
Subject key identifier: A8:BD:18:BC:0D:15:99:8D:E5:D4:EE:23:DA:B0:67:B0:45:67:4A:3D
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer: /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial: 01984777A33EBF5FD9F5BA12B61860E79016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number: 0D98
Signing time: Sat 26 Jul 2025 16:01:19 +0000
Manifest this update: Sat 26 Jul 2025 16:01:19 +0000
Manifest next update: Sun 27 Jul 2025 16:01:19 +0000
Files and hashes: 1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: XmVwC9PreHr8MZmCjE/Y67NxXeVWfzd7VFAi0Tgmah8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a3:3e:bf:5f:d9:f5:ba:12:b6:18:60:e7:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Validity
Not Before: Jul 26 16:01:19 2025 GMT
Not After : Jul 27 16:01:19 2025 GMT
Subject: CN=a8bd18bc0d15998de5d4ee23dab067b045674a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:ab:58:a8:09:61:f8:41:a4:dc:bf:78:0c:
e6:3a:eb:c5:51:76:9c:ce:2f:5b:7b:c6:d3:ca:ec:
90:1f:80:fa:f5:37:4c:dd:34:7f:cd:57:51:ce:bd:
5d:bd:bd:31:28:72:39:67:2a:9e:db:42:3c:64:2c:
d0:73:a0:b6:84:51:17:ac:32:d6:29:99:3f:b2:c7:
55:6f:ec:e3:e2:5d:56:f9:26:d0:e6:da:d6:7a:5b:
97:87:fa:47:01:61:8b:73:74:ac:f3:92:0a:0a:e0:
a4:b8:40:b2:92:29:48:35:f6:10:75:41:f6:80:b6:
d2:d9:3c:62:39:28:4d:55:04:7b:93:a7:77:fc:c8:
1a:d0:2c:88:56:f6:42:2c:2f:4a:60:f4:30:22:ec:
f7:cc:04:c3:f2:4c:58:43:44:1d:f5:35:95:d9:bc:
c7:76:ae:09:71:87:e6:b6:36:60:a6:8c:04:eb:39:
fb:7e:4f:9c:c1:80:71:e5:27:a5:7a:23:83:d4:b5:
a3:d5:2b:e8:37:ca:0b:01:20:e0:4b:77:62:7b:7f:
05:7e:f5:cd:5b:85:45:3c:7d:30:ca:97:d7:bd:c6:
2f:6c:20:28:2f:6c:73:a3:c0:8a:51:a0:f4:86:a7:
57:4c:07:af:48:6f:40:77:39:a7:da:f1:3e:11:a4:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:18:BC:0D:15:99:8D:E5:D4:EE:23:DA:B0:67:B0:45:67:4A:3D
X509v3 Authority Key Identifier:
keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:04:d2:dd:63:6f:74:26:c9:96:73:0a:6d:67:81:86:7c:aa:
fe:c8:e3:6a:f2:50:17:13:d1:d5:4b:c5:c9:6d:25:cb:cd:92:
0d:40:f4:4f:60:17:3f:15:a5:76:09:fd:bf:17:5f:66:b9:50:
04:ac:e8:52:00:70:ce:2f:9b:3c:4c:4b:3f:ad:6d:2a:3a:04:
b5:ee:60:0b:f8:39:b6:89:28:a9:75:db:14:16:1d:2d:1b:8a:
68:1b:ad:5c:a9:a1:4a:7e:3b:7e:17:e0:48:77:41:06:cc:b7:
c1:28:47:6a:45:90:e8:99:42:45:ce:ce:4e:60:c9:e2:b4:40:
1f:92:b7:f0:50:1c:89:79:2f:85:dc:02:e7:9a:36:44:fb:b3:
72:fa:5a:26:66:a4:7d:e7:df:cf:0e:54:78:df:2c:3f:90:e4:
86:63:59:31:c0:30:9a:47:fc:5f:38:d9:d1:c3:ba:00:b2:bb:
01:78:79:1a:a4:6f:b2:27:ee:e1:29:51:7a:d3:20:67:3b:ce:
2a:94:b3:89:a8:cb:a8:17:42:32:58:33:f3:d9:6b:4a:fa:f1:
84:b3:24:d5:7a:e8:89:eb:74:a8:b8:fc:b0:17:a7:79:69:f4:
1a:37:3b:c7:74:cb:4a:25:a4:ae:53:33:84:99:d7:43:1e:13:
b7:ec:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:24 2025 by rpki-client