Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: MubJLe8xcomdWZbw1gcD6sg448esr6Z2A0ztbz1oQlo=
Subject key identifier: 07:E8:3F:2C:26:11:CB:EF:96:AD:F3:58:FC:48:30:EC:B0:1E:23:05
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 019758DB510CEC32F6CC6633088F8EBC8C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0896
Signing time: Tue 10 Jun 2025 08:00:57 +0000
Manifest this update: Tue 10 Jun 2025 08:00:57 +0000
Manifest next update: Wed 11 Jun 2025 08:00:57 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: W095+I1l9ixncCszbODYXqp+HrBjrlNIwveIzEiBLMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:51:0c:ec:32:f6:cc:66:33:08:8f:8e:bc:8c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Jun 10 08:00:57 2025 GMT
Not After : Jun 11 08:00:57 2025 GMT
Subject: CN=07e83f2c2611cbef96adf358fc4830ecb01e2305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:6b:1f:3f:02:f9:42:00:30:cb:c8:cc:84:
5c:76:f2:94:a1:00:bd:88:a9:4e:89:d7:78:8c:ab:
e8:45:39:15:64:09:5a:f7:d3:bf:66:3d:00:eb:36:
24:3e:22:8d:c4:65:d8:41:c9:ce:65:60:a8:0c:de:
af:7d:8c:8f:4a:28:6e:b9:25:ab:4d:14:c5:2d:51:
4b:d2:ec:1b:a8:69:e7:06:9e:53:89:7e:92:ea:a0:
cc:e1:8e:44:f9:63:d6:1c:e8:8b:39:90:c0:63:12:
7f:0c:c9:c8:52:5e:20:1c:ed:35:92:e2:f0:9e:15:
80:ad:24:8a:31:75:44:ef:4c:6c:65:3d:14:f7:bc:
14:3e:8e:de:48:07:5e:b2:17:a1:08:49:61:d2:7b:
a8:f2:df:e5:cc:49:ed:b4:6b:5b:6f:90:07:dd:5b:
12:47:24:c7:3f:ad:0f:82:e0:50:66:0a:d8:2b:5e:
25:80:c8:fb:91:a7:01:b1:55:13:be:39:ba:57:3e:
f4:b4:06:22:c4:c4:fd:0d:5d:fd:a2:32:ee:32:ee:
8a:8b:86:41:d0:51:6d:09:27:5d:e2:96:b8:a9:4c:
3e:b0:8e:c9:27:11:8a:07:93:aa:87:69:3d:a7:24:
eb:4f:43:b9:85:d4:a7:0c:c8:4e:0e:43:cb:91:57:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:3F:2C:26:11:CB:EF:96:AD:F3:58:FC:48:30:EC:B0:1E:23:05
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0f:8d:8c:b0:d3:9b:f8:9f:13:ad:3b:41:85:c6:0c:69:a9:
8e:20:09:3c:f0:e4:e5:4a:08:85:9a:85:aa:02:4a:89:85:c6:
52:a0:45:ea:54:f8:7d:d3:67:f9:8f:80:01:7e:b2:ad:15:3a:
ea:e3:5b:9c:a0:ed:05:db:25:49:55:07:29:c5:17:b1:74:1b:
44:cc:c9:4e:70:3f:b1:f7:b7:29:23:9a:2a:9a:ae:58:a8:60:
6d:7d:94:4c:66:6a:28:ad:06:59:ee:4d:4c:04:e2:94:38:7d:
c8:e4:f2:ef:b9:05:c7:78:3f:f3:0a:83:49:4a:80:22:63:4e:
c3:40:c3:b5:c9:b6:c0:e2:e0:1e:bc:a8:88:9d:e5:e5:bc:cf:
46:65:45:01:9f:da:e6:d5:a6:b7:16:22:2f:f2:12:a1:76:0d:
dd:97:4e:3d:6a:d0:fe:d0:ba:70:51:2d:70:c3:15:8c:5e:82:
1a:f0:fb:fc:89:f9:2a:f1:01:fc:3d:02:ec:2f:f2:ee:3e:96:
8f:17:c4:7a:23:b9:4d:fa:f9:99:83:d5:88:b8:3e:98:f6:37:
61:49:95:5b:f9:53:79:63:bb:af:54:ab:ec:eb:f9:ac:f7:1c:
90:ba:a9:e6:66:db:4d:e0:4d:b7:41:74:94:f6:3c:50:19:01:
87:55:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:43:17 2025 by rpki-client