Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: 2QUn91zZUA4W46J1Sj+hr4fBG7B06D59VPGrsC23lrw=
Subject key identifier: E6:84:0E:2D:3F:2B:A4:5F:41:E5:BE:5C:B8:4C:FD:AB:32:69:DF:EA
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019748F9EBD92991E675BBF7BDDE0F666CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0C61
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: Iqj4Aqsy8cWVOu1Io9Lmhxq4welTPnh4zJrFCsUZTAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:eb:d9:29:91:e6:75:bb:f7:bd:de:0f:66:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=e6840e2d3f2ba45f41e5be5cb84cfdab3269dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:f0:a4:a1:d6:34:dd:5d:37:51:fb:1f:5d:
fb:89:17:24:60:a5:e4:28:62:43:37:2a:9c:9b:94:
8f:87:74:36:88:04:71:30:cc:41:39:26:ca:66:ce:
b7:f6:48:b8:05:3f:af:04:8c:ed:77:0f:63:99:ad:
6c:da:f5:b9:f4:ec:fd:5f:40:53:0a:77:7c:a1:c5:
4f:c0:90:16:d9:22:5d:14:ed:b8:9c:c5:50:26:3f:
83:a4:b5:ee:0b:74:47:d5:e4:58:45:ab:ad:a1:15:
61:96:e4:94:c4:9b:ec:0e:7f:62:72:a5:43:75:96:
97:c4:1b:0a:13:96:17:d8:f9:a2:26:50:d7:93:90:
e2:90:86:f7:38:91:13:b6:43:f4:cc:68:94:9b:62:
96:dd:49:14:b3:de:6b:cc:ef:fe:08:97:fa:30:32:
f2:5e:ee:b8:46:f2:17:dc:30:bb:f6:46:0d:f5:2d:
ce:8f:6b:15:f6:c4:5c:a1:20:2f:28:a5:01:87:60:
8e:97:2f:4c:cb:a7:21:b4:8a:7a:ad:c3:ad:ff:af:
4f:a9:42:ac:65:3e:b0:6e:80:b9:12:92:9e:f5:34:
66:7e:50:32:de:6f:7f:4b:55:fc:61:1b:10:b7:be:
cf:54:5c:a4:f7:49:13:da:7e:2f:d5:d0:9a:a1:7b:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:84:0E:2D:3F:2B:A4:5F:41:E5:BE:5C:B8:4C:FD:AB:32:69:DF:EA
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:2a:7e:8c:d0:7f:16:d1:4f:ac:e1:09:8e:e4:cd:93:73:
fa:17:97:10:0a:d9:a6:df:1f:23:fc:d0:7a:15:c2:8e:3b:a5:
8a:0a:93:86:af:7d:d7:b6:06:fa:eb:c5:92:f1:24:8a:c7:e0:
bd:ce:41:5e:4e:37:e9:08:4f:1c:47:22:f7:83:91:96:3d:03:
98:13:ae:df:55:48:68:9e:a1:40:37:73:47:a7:88:6c:c3:85:
49:97:c3:8f:74:91:d0:97:ba:44:f2:43:b2:ab:d3:6d:1c:df:
88:97:2d:ba:f9:26:43:cc:7a:04:ea:f9:81:98:0e:8b:97:45:
5f:de:c9:a7:2a:17:49:fb:9e:74:19:7e:d2:f6:12:4a:df:b2:
54:34:25:e2:3d:b3:db:ba:12:06:4a:d4:ab:c7:2e:92:6d:c6:
f6:8e:21:bf:3b:d6:13:00:54:86:4d:61:a8:d8:58:67:5a:b7:
53:0d:66:f7:57:01:1d:f6:51:b3:31:66:01:a4:98:9d:d2:5c:
0c:f9:3a:6b:74:4e:11:3f:ef:6f:ff:df:be:f6:1b:4f:ef:05:
8a:fb:b1:b6:08:3a:aa:a2:e0:b2:d5:9a:a0:a6:e4:97:be:70:
fd:02:94:e4:ac:ff:81:69:2b:79:81:2a:2e:e4:30:34:2d:86:
c5:52:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:23:47 2025 by rpki-client