Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: 2UE5cx584K9e0xh2zKwq/KbhOb9JDnvvnnt5WuPrcvk=
Subject key identifier: 48:E4:96:5A:11:FC:32:08:76:A9:B4:9E:D0:43:4E:C4:8E:B8:DF:82
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019772640A59248D69DCF8EBCBD1DF18E99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 12C7
Signing time: Sun 15 Jun 2025 07:00:48 +0000
Manifest this update: Sun 15 Jun 2025 07:00:48 +0000
Manifest next update: Mon 16 Jun 2025 07:00:48 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: J16xjrIvcwLjr6Si1GEeEYVErzjOn+/biU90FCSVEhg=)
2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:0a:59:24:8d:69:dc:f8:eb:cb:d1:df:18:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Jun 15 07:00:48 2025 GMT
Not After : Jun 16 07:00:48 2025 GMT
Subject: CN=48e4965a11fc320876a9b49ed0434ec48eb8df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:0c:df:0d:32:3b:c7:e3:76:d5:2d:da:f8:
c0:5c:90:e3:e5:8f:80:f4:43:2a:63:2c:d6:ae:2b:
1c:2f:64:8b:c1:66:0b:37:18:ce:7c:aa:00:b9:44:
3d:df:85:39:42:28:f0:13:fb:3e:4d:d0:a3:f1:07:
d3:9d:4a:29:39:70:6a:1b:40:59:72:04:77:18:d2:
60:93:01:b2:8e:76:c0:ff:fe:12:c8:55:8e:15:cb:
d0:35:74:64:1e:ae:8d:a4:7f:ff:83:48:d8:b0:11:
39:12:9c:ae:fa:3c:bf:b1:62:8c:93:f5:1f:5e:f5:
86:5d:91:57:86:4f:e4:0e:05:49:3d:02:83:c2:db:
f7:04:a2:44:c5:73:90:b4:ff:42:0f:49:2a:1a:ca:
68:09:68:64:a4:5e:c6:39:3d:16:01:f3:7e:20:96:
0b:00:bb:0b:3a:50:90:17:c0:c7:c0:74:28:dc:12:
91:3b:88:47:83:45:e9:13:25:1e:41:64:14:67:84:
53:8d:12:d1:da:bd:f6:a3:3f:ca:7e:f5:bf:52:4d:
03:29:d5:af:14:5c:de:dd:fc:df:38:1b:da:bc:3e:
ed:2c:99:d7:5e:65:8a:5d:ad:27:ef:74:f6:35:79:
92:90:48:6e:5f:34:a6:d3:3f:71:74:17:89:05:8e:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:96:5A:11:FC:32:08:76:A9:B4:9E:D0:43:4E:C4:8E:B8:DF:82
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:17:38:e5:06:af:b1:69:a8:91:33:89:c0:c7:b1:73:57:eb:
7b:c0:3a:99:89:b7:5d:bf:e0:92:ff:7b:2a:3f:64:ce:6a:f7:
b4:bf:29:63:46:8d:8d:6c:87:24:95:dd:b0:e9:9a:32:ed:02:
2c:de:e7:89:71:cc:92:31:e1:06:c8:af:69:ed:b6:e3:87:54:
33:6d:f9:aa:61:ca:63:dc:d2:69:ed:b4:c3:a2:c1:96:89:56:
f9:b4:52:9b:62:72:fe:b2:31:4d:b0:81:0f:b2:63:5a:2e:d2:
47:16:6e:2e:be:79:2c:ed:d4:d1:17:19:7c:2b:33:61:d2:77:
4f:a6:44:e7:66:f8:ff:ae:c3:5f:91:e0:8d:ba:ac:ef:d3:45:
82:32:67:89:2c:5d:4b:73:3b:06:8a:ec:a0:3e:df:46:c9:54:
81:4e:d1:1b:a4:bc:3e:eb:53:46:23:00:ea:65:ce:5b:77:67:
0c:fa:75:81:f3:44:c8:0c:8a:79:cb:03:ad:cb:b7:68:df:5f:
db:02:6f:23:f9:59:c1:49:b2:a5:35:89:ac:0f:50:76:d5:51:
bf:b4:7d:92:6d:58:95:42:78:5a:7e:8e:6f:55:7e:b2:a2:78:
1a:3d:bb:fa:11:bb:ea:dd:f9:c7:da:80:29:45:0a:81:ee:a7:
6b:b1:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:52:06 2025 by rpki-client