Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: 4QZgnA2eO9qrE1yyh7epyl9N0WhKQahFRqZQu2pD/nc=
Subject key identifier: 09:47:8E:F6:54:4D:0B:D5:2E:19:4A:C5:30:4F:7B:89:B6:0B:41:81
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0197CDCD31D1DD94774B948B6FE2167AF209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 06D7
Signing time: Thu 03 Jul 2025 01:01:06 +0000
Manifest this update: Thu 03 Jul 2025 01:01:06 +0000
Manifest next update: Fri 04 Jul 2025 01:01:06 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: 33hUTUeA2+GesfQE1c7mJj+Dp9HcLO/vz+rdukn6S3M=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:31:d1:dd:94:77:4b:94:8b:6f:e2:16:7a:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jul 3 01:01:06 2025 GMT
Not After : Jul 4 01:01:06 2025 GMT
Subject: CN=09478ef6544d0bd52e194ac5304f7b89b60b4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:c6:99:e4:1a:90:cd:e6:b7:a0:a0:bf:e0:
58:bc:b1:b6:bd:f9:08:e9:85:bc:51:ce:5a:62:29:
72:8a:c4:54:bb:23:70:02:60:51:cc:0b:2c:c6:c4:
a7:a3:4f:6d:91:7f:4a:1c:28:07:14:64:19:7f:19:
77:67:8e:88:18:41:e6:8f:a7:c2:cf:bc:4c:d2:15:
a4:78:d6:ab:6c:09:0f:57:bd:45:c0:fd:82:23:aa:
b1:81:17:1d:21:85:d7:06:30:fe:db:26:d2:3a:d6:
88:0c:d9:c6:2d:68:e7:73:3c:74:a9:7d:bc:fd:b3:
ce:b0:90:71:51:5f:3d:4b:03:e2:a5:5d:d0:b0:c1:
83:a0:44:db:ba:67:79:2c:68:3a:61:21:70:94:f0:
3e:28:ef:48:15:1b:86:00:ba:36:8b:54:44:b4:c1:
38:4e:ef:03:4a:9d:95:0d:fc:fc:a0:ae:f4:ba:02:
f0:a9:71:c8:7b:a4:78:b1:2e:ff:a1:35:6e:85:e2:
b9:32:5d:bb:5e:08:10:11:0c:d4:5f:ea:5a:8f:d8:
b7:f6:eb:d3:a9:b5:ac:9a:5e:7b:44:63:73:23:32:
3b:4f:26:c2:ad:80:30:43:a4:27:20:30:3f:4d:f7:
e6:27:a7:9a:ea:0a:bd:92:42:67:06:b2:0d:37:f4:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:8E:F6:54:4D:0B:D5:2E:19:4A:C5:30:4F:7B:89:B6:0B:41:81
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a2:d1:ee:96:de:93:01:0f:17:93:ad:f8:53:b9:40:16:6c:
65:82:62:0f:bd:57:f2:94:4a:7c:20:f3:37:a3:3f:3c:25:0b:
b5:44:e0:99:a3:51:a4:1f:19:d7:2d:9b:fa:8a:98:20:33:1f:
79:2e:91:6b:2f:2b:43:c3:b5:4c:53:cb:83:d2:f1:3a:89:e6:
92:d6:48:be:ba:54:11:05:a5:79:07:b0:0d:a4:9e:ac:e7:a9:
a0:4d:53:c8:99:26:95:ca:9f:3a:4f:e8:4b:4b:ef:e0:8a:b9:
e4:63:fe:1e:0c:cf:9c:6a:0b:08:89:79:c5:b0:1f:1a:22:ec:
e9:40:2b:52:39:0e:98:d2:f1:d0:4f:f8:21:5e:30:58:8b:d3:
c3:a1:21:81:15:05:0f:c0:2d:ac:b8:87:04:62:b0:bf:1c:29:
bb:61:f6:83:1d:59:0d:0f:68:a9:5c:42:fe:84:af:b6:ab:5a:
cb:8e:df:78:80:d7:57:ad:a5:10:e6:3d:e3:0e:02:f3:68:4c:
85:7e:b4:8f:7e:68:2d:fc:1a:59:00:a2:dd:37:ef:1e:4b:72:
7e:ee:45:15:96:8b:94:08:40:e5:fd:41:42:31:5e:32:4b:b7:
00:ab:39:16:c8:18:65:1a:d6:f2:47:e8:6d:13:38:e1:0c:75:
4b:29:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:07:42 2025 by rpki-client