Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: Z6hdo968y1U1yU0ZkMS337HmpF7hN4v8YU56bSJoaMw=
Subject key identifier: 00:8B:E5:CD:9A:C6:CC:73:B6:41:5B:03:16:B5:E3:AA:82:8D:AC:AF
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 01975CB7B84C56017AEBCFD18D33E1C4F5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0898
Signing time: Wed 11 Jun 2025 02:00:33 +0000
Manifest this update: Wed 11 Jun 2025 02:00:33 +0000
Manifest next update: Thu 12 Jun 2025 02:00:33 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: dlBeOjoDW5M9dn8aGkClZuikwcWTDetLsdGCeRX1RmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:b8:4c:56:01:7a:eb:cf:d1:8d:33:e1:c4:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Jun 11 02:00:33 2025 GMT
Not After : Jun 12 02:00:33 2025 GMT
Subject: CN=008be5cd9ac6cc73b6415b0316b5e3aa828dacaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:4d:9b:f8:1f:ce:81:c6:61:93:29:8c:20:
49:51:47:49:c9:1e:9d:e1:67:1f:74:a5:83:17:53:
81:7b:31:a9:ea:36:58:d3:af:62:12:89:3e:32:74:
3e:6d:a3:df:e1:5e:d6:4b:fd:89:d5:c6:5e:b1:f1:
60:e5:8e:e6:a1:59:85:d7:6d:fc:95:c9:4e:66:9e:
b9:9a:d0:9f:96:48:77:82:42:b3:b7:94:05:6d:5e:
0c:8a:26:a3:0a:b4:a3:a0:4f:07:04:4e:92:7c:db:
1e:7e:7c:99:16:3e:d2:36:4d:a3:51:01:80:f5:8b:
6a:30:9f:45:f7:1d:89:d6:30:fe:a8:80:95:d9:d3:
5f:ff:38:ee:26:2c:e3:b1:8f:f4:d5:79:ed:1c:77:
6a:db:6b:0a:66:da:5b:b3:8d:f5:b6:b6:97:ff:bd:
59:19:68:c8:4f:72:77:e4:0a:d0:9c:94:f6:a7:1c:
75:5f:2f:15:be:c0:8c:17:78:0c:40:99:df:a3:0f:
49:f8:6e:42:f7:39:6b:c7:c5:aa:4e:f0:f0:2f:8d:
31:7b:63:6e:97:3a:30:63:dd:9e:f3:dc:3c:d3:05:
43:57:5b:57:56:5e:b2:b3:dd:19:99:b4:62:04:1f:
ea:2b:48:34:ea:12:86:84:b7:5f:14:0b:81:e7:4e:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:E5:CD:9A:C6:CC:73:B6:41:5B:03:16:B5:E3:AA:82:8D:AC:AF
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:7c:d2:5d:cc:26:91:82:36:d5:44:c0:55:7a:d3:c3:6c:
17:f3:03:b8:99:48:86:cd:b8:67:0a:f0:63:38:ff:d7:99:82:
eb:2e:68:b4:ea:64:49:8b:0c:b2:fa:dd:2a:06:2b:7b:63:0e:
61:ed:3f:30:fe:21:99:bc:0f:ac:07:05:56:f9:14:24:c0:c3:
c3:36:7c:f3:f5:7e:8b:4d:96:7a:bf:a3:76:a7:be:75:bd:d6:
5e:6b:bf:e4:3a:fc:84:ca:51:33:0d:61:1b:fb:5f:68:61:75:
01:cc:b9:07:4d:fa:ad:a0:ae:4f:41:53:ad:1d:6d:bc:b1:17:
1a:12:36:75:77:05:c7:38:84:6c:7e:f9:4a:27:d6:c8:b8:e4:
6b:ea:28:35:ee:0d:f4:70:96:a6:dc:25:60:a2:80:5e:30:f6:
84:41:d8:a6:96:3d:7d:e9:76:fd:21:0d:63:8a:3a:e3:83:77:
43:08:fc:bf:e7:b4:09:3a:45:df:e3:3e:b4:95:99:89:0d:1e:
4c:2d:7a:2a:44:3e:cc:2d:4a:96:f1:66:8c:36:10:59:2f:82:
2f:f1:f9:d7:17:13:10:3a:a5:a9:ab:ef:69:5b:f3:ec:5b:b1:
4a:04:42:25:99:d6:aa:fb:b5:ed:d3:63:69:23:8c:a8:89:af:
f5:aa:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:57:04 2025 by rpki-client