Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: o1MryxJiFdtmc5lVOwfuSdClvT59osr1bEls8OSZ0Ds=
Subject key identifier: CD:DB:31:FD:60:DB:87:B1:C7:30:1D:B1:07:20:C5:11:3E:02:A6:56
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 0197440AE3B53E33F3DF842D6D71AB79819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0D1A
Signing time: Fri 06 Jun 2025 07:00:53 +0000
Manifest this update: Fri 06 Jun 2025 07:00:53 +0000
Manifest next update: Sat 07 Jun 2025 07:00:53 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: w6mzlhzySF805YWSOEBToxKn91ob+ljXDP1gYVq5seg=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0a:e3:b5:3e:33:f3:df:84:2d:6d:71:ab:79:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jun 6 07:00:53 2025 GMT
Not After : Jun 7 07:00:53 2025 GMT
Subject: CN=cddb31fd60db87b1c7301db10720c5113e02a656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:23:93:09:23:27:e6:f5:fc:77:53:e7:62:
f8:f0:3a:b5:eb:f8:e1:2f:24:47:b6:80:e5:43:b5:
8b:77:e0:11:e9:a7:9d:78:63:af:97:57:29:5b:78:
48:af:fe:7a:75:d2:ad:39:44:66:46:a6:bc:d7:c0:
2c:75:21:d6:ba:76:15:2f:b7:28:7f:a7:d9:c2:38:
7e:83:c2:5b:ef:14:09:58:8e:d6:d3:65:d1:ec:44:
7f:f4:56:fc:60:f5:f1:42:5d:0e:14:7e:3b:aa:cc:
84:50:48:fc:3e:a7:ba:32:3d:a8:b1:c2:e0:a6:54:
d2:97:ae:0e:e9:20:7a:d8:68:57:a6:1c:52:52:e1:
66:22:4d:5c:48:3b:74:c8:ef:f8:fb:28:88:fd:78:
f4:5a:2a:49:ce:69:7b:4a:8a:ac:2a:cb:83:d5:e7:
13:ac:07:02:f0:17:aa:9b:2c:09:97:e1:b2:83:e6:
fc:66:ed:9b:a6:49:e9:f8:21:97:3f:fc:65:d8:0c:
f6:d3:8b:68:6e:63:48:ad:dc:23:cd:8b:99:2c:30:
f4:dc:7e:a2:f8:b7:12:e4:4c:bd:68:6c:2a:cc:6d:
5c:7d:c9:a0:de:7b:28:56:5e:d7:96:b2:a5:9d:1b:
3a:1d:ae:46:5c:5a:c8:e6:f3:f5:a5:9a:0f:9f:32:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:31:FD:60:DB:87:B1:C7:30:1D:B1:07:20:C5:11:3E:02:A6:56
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ad:2c:9c:6a:1e:5c:6e:c7:ac:f4:7f:b3:03:e7:76:d9:44:
fc:a1:86:f4:c1:cc:09:7c:bb:6c:26:2f:1a:f7:78:70:f8:e2:
2d:a5:1b:b1:2e:1d:cd:a3:b5:77:ad:31:a7:b5:c3:cb:d9:9b:
03:7e:00:20:31:14:bf:5e:eb:9e:47:d2:bf:aa:1e:18:ef:a2:
56:cc:01:4e:42:c6:b1:cc:49:5e:db:15:5d:3f:53:bf:e5:94:
5d:e5:be:99:f6:83:71:4b:a8:c0:d4:a0:21:2e:81:75:cd:0a:
91:75:8e:8f:65:92:be:15:40:90:62:62:4c:fd:b3:96:db:1d:
89:90:a5:0d:36:ac:7f:2f:c8:48:87:5c:f0:1a:1d:9c:c6:a2:
ae:cc:64:85:57:40:c6:b5:ad:46:f7:7f:25:2d:78:76:6f:97:
20:c6:57:3c:73:73:66:64:4b:69:9e:aa:87:96:d7:d4:4a:e0:
3d:94:d7:f8:42:ed:a2:22:e6:b8:b1:9e:39:a3:74:64:9c:a6:
0c:ee:08:bb:28:59:27:66:f2:56:ff:55:a9:76:83:fa:23:0b:
a9:3f:40:78:ff:d3:eb:63:49:6a:e2:5b:2a:46:68:77:7b:9b:
f6:d0:47:04:76:3e:50:08:55:1a:29:d2:12:99:fc:ee:7c:5a:
78:02:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:48:22 2025 by rpki-client