Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: HLF4IPQ9syx7K1yP+EDKCtOtn2O78hDX1spIAldX4es=
Subject key identifier: 6D:02:C0:1C:95:E1:1D:A6:56:DC:06:6D:FB:38:6E:96:CC:0E:C7:66
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 0198499C2053A40B79570A598790C952CF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 0445
Signing time: Sun 27 Jul 2025 02:00:25 +0000
Manifest this update: Sun 27 Jul 2025 02:00:25 +0000
Manifest next update: Mon 28 Jul 2025 02:00:25 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: gmIv3VOfCljrulufN0CtptjIxdNje5XKeSEWTHOd34s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:20:53:a4:0b:79:57:0a:59:87:90:c9:52:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Jul 27 02:00:25 2025 GMT
Not After : Jul 28 02:00:25 2025 GMT
Subject: CN=6d02c01c95e11da656dc066dfb386e96cc0ec766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:c7:b1:31:3d:5a:90:6d:b0:d2:ee:de:17:
b3:d3:2a:98:e5:9c:c6:16:d5:4c:2d:6b:35:ab:c4:
37:d0:98:04:d3:b6:a5:48:36:5f:f3:98:1c:55:16:
eb:1b:a7:29:b0:1e:e0:25:28:df:43:09:46:ee:c4:
72:63:88:16:fc:a1:79:77:74:04:03:3d:c6:d3:30:
45:2b:41:f8:8a:07:c3:c2:43:1b:56:cf:2c:b0:d9:
b4:c2:dd:93:b6:09:bd:a7:f9:54:d7:db:8d:aa:d0:
31:59:58:15:a3:b5:19:4d:1e:ac:86:ae:f6:9d:7f:
7e:3e:75:c4:a5:ef:78:d9:36:f1:8b:60:64:87:79:
df:19:af:9e:5b:71:0b:1a:6c:f5:60:d1:bf:4d:78:
f4:72:05:f4:fc:8c:92:51:cc:11:b9:44:8d:4d:ba:
94:ae:e8:c1:35:a5:3a:92:35:69:b8:39:c6:83:0b:
55:1f:0e:3e:c2:23:b0:a2:9f:3f:2f:7f:7f:cb:63:
db:23:8c:c8:aa:4a:17:3b:1d:de:c3:92:89:21:de:
78:81:35:53:4d:09:03:5e:c7:03:07:d9:e7:c0:4b:
b8:4b:bd:ab:c0:2e:13:5c:ab:02:44:71:99:5a:c8:
e4:9c:58:98:81:a4:e8:95:82:b9:c3:d6:b7:3e:0a:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:C0:1C:95:E1:1D:A6:56:DC:06:6D:FB:38:6E:96:CC:0E:C7:66
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:a4:ce:ff:22:73:c7:09:43:52:bf:d8:f8:21:88:dc:de:
45:b0:53:ad:2b:34:16:95:9e:73:d7:a1:48:b4:0e:41:dd:f6:
d1:68:bf:af:98:d3:3f:ab:15:50:34:59:1d:57:06:a4:0a:d8:
d4:10:65:44:e9:4b:6c:8e:de:5c:85:ee:b4:16:43:7c:89:76:
ab:b9:43:33:68:94:6d:6e:86:37:2e:42:9a:3e:61:7d:01:03:
98:40:18:cb:16:ae:b2:1f:da:9e:2b:38:fd:3f:be:db:be:67:
4d:50:35:31:ac:b6:fc:74:7b:a7:0e:c4:91:91:b9:ad:79:e0:
32:11:bc:6f:7e:63:94:26:a5:23:3d:ab:67:4d:9f:13:87:93:
70:cc:2b:28:62:87:8e:93:fa:a5:d7:de:09:b3:b0:7b:b5:cc:
39:c5:e4:1b:e7:ce:ab:18:42:f7:a7:0c:48:99:c2:9b:3b:47:
85:2b:98:27:5e:4d:f0:be:2d:7a:0d:d3:dc:f5:fa:60:9f:b1:
29:bd:4e:1f:71:0a:a2:92:81:8b:02:77:d6:98:6b:2d:45:f2:
c7:b1:6b:91:61:d0:6f:25:c4:f6:dd:cb:16:c0:19:3e:cd:0d:
73:07:fd:3c:c5:ca:b1:7a:b7:d2:cb:5e:51:e7:45:29:93:2e:
ed:b6:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:04:28 2025 by rpki-client