Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: fIXiYde/5PMHPVUjcn0LzLn3/RLxaImYDzj2/Xe3htU=
Subject key identifier: C8:A2:81:10:76:9B:0A:50:9A:30:15:37:C7:8C:9A:87:8E:35:7B:D8
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019748FA164303F14A5FB72DACEE85A23366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1184
Signing time: Sat 07 Jun 2025 06:00:38 +0000
Manifest this update: Sat 07 Jun 2025 06:00:38 +0000
Manifest next update: Sun 08 Jun 2025 06:00:38 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: B/unWChgex5TXPQgUctlkDt+t8LGye6qXSa1JRer9N8=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:16:43:03:f1:4a:5f:b7:2d:ac:ee:85:a2:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Jun 7 06:00:38 2025 GMT
Not After : Jun 8 06:00:38 2025 GMT
Subject: CN=c8a28110769b0a509a301537c78c9a878e357bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:04:95:48:58:9d:a7:41:f5:ac:15:a9:0e:
23:68:53:0c:13:e6:e6:ad:c6:19:a6:da:d1:51:19:
fc:5d:75:e4:7e:c3:13:a9:6b:b9:4a:d4:dd:46:19:
d7:5e:67:bf:20:c7:08:19:2f:83:02:03:8c:c2:63:
e2:f3:d0:9b:6a:c4:a7:71:0a:65:53:dc:87:9f:d1:
05:61:95:0e:fa:f9:f2:c8:fa:3d:29:ce:61:27:77:
8f:24:76:1f:02:c6:74:c4:82:26:13:0c:98:f5:60:
12:4f:eb:cc:f2:ef:6e:a3:38:15:80:5f:ec:65:08:
08:83:ea:a6:f1:a2:6c:5e:51:81:b9:cf:ed:cf:d9:
bc:12:8c:22:30:47:53:56:b2:96:23:73:f6:a8:1c:
cb:3c:ae:7f:be:fc:e5:98:ee:8d:f5:bd:a5:4c:83:
7c:86:8c:c7:e4:be:d8:14:45:19:7e:a6:15:7b:0a:
8e:be:fd:56:bc:8f:a4:e9:22:1f:2f:b8:4c:d8:c4:
12:31:00:31:9f:ca:81:ab:a6:3a:3e:c5:9a:d4:46:
47:18:5e:a7:93:32:8d:c1:99:49:06:3e:8f:1b:23:
db:c0:26:16:8e:d0:8a:8b:5c:a9:7b:c7:1f:3e:6e:
37:ed:b1:c0:45:26:46:91:d2:f0:5c:51:e7:55:d7:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:81:10:76:9B:0A:50:9A:30:15:37:C7:8C:9A:87:8E:35:7B:D8
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:59:c1:f8:6f:da:dd:8e:a5:bd:76:5b:05:fa:cc:35:9a:11:
97:51:dc:d1:20:dd:8f:e3:e7:f2:6e:e1:69:5b:66:6c:a0:3f:
0e:20:df:75:2a:be:ae:b1:01:58:e0:00:d4:f6:98:ba:47:57:
7e:32:25:9f:9a:73:00:d3:fd:e4:5d:db:62:84:08:49:d2:c6:
b4:0f:58:84:24:9c:62:63:e9:b0:6e:75:9a:e0:26:9c:e7:42:
4a:ca:ce:61:09:0d:bb:18:1e:f5:a0:a6:60:88:0c:94:d4:db:
36:1b:dc:3b:69:f0:cb:75:12:96:06:7c:0a:07:a8:21:1e:90:
5b:5f:0f:bf:b4:c9:1c:23:1d:f6:f1:e7:74:9f:b4:a2:7c:4b:
55:29:5b:f4:f6:6b:0c:ac:45:15:5f:2e:46:ee:00:b7:ab:6c:
69:fc:90:74:bd:36:8a:1c:5c:81:2e:6a:e6:97:7c:55:a3:93:
12:33:e9:48:df:b1:6f:c5:37:23:0d:54:fc:1c:e0:d9:b2:16:
d6:74:2a:95:a7:1e:c5:cc:ae:48:f3:8a:3c:e3:69:ed:58:a8:
2f:24:78:2f:62:1f:08:40:6f:75:6d:f4:9f:e0:1d:c9:63:56:
1e:17:1c:b8:61:1c:b6:64:fe:46:74:e3:48:c1:fa:0a:0f:fc:
ce:ea:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:24:28 2025 by rpki-client