Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: sJzNuJDNWv3HBnIAm50lxWIGGbiN8q+TzGr5B7HgSUw=
Subject key identifier: 71:FC:57:94:7F:7E:4B:B0:26:D7:18:94:15:4C:CD:FB:C5:36:9C:41
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019917649A271C0ECC0DBC482A3819FDF087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0E0C
Signing time: Fri 05 Sep 2025 01:01:32 +0000
Manifest this update: Fri 05 Sep 2025 01:01:32 +0000
Manifest next update: Sat 06 Sep 2025 01:01:32 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: K35zePfj4BYVORVlTidr/gqQrvP5CsgKCBmKPeR2ZIY=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:9a:27:1c:0e:cc:0d:bc:48:2a:38:19:fd:f0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Sep 5 01:01:32 2025 GMT
Not After : Sep 6 01:01:32 2025 GMT
Subject: CN=71fc57947f7e4bb026d71894154ccdfbc5369c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9a:8e:22:1b:31:9d:2d:59:2c:f8:af:45:bc:
a8:aa:c0:d3:c4:99:35:4f:de:06:f1:8d:1a:59:43:
c0:78:2c:a1:6e:36:b6:3d:21:69:72:dc:2d:e1:4d:
a3:d6:bb:94:ef:c5:8f:3c:c3:16:27:8c:51:6a:53:
46:15:ea:e9:ea:ce:21:f5:87:37:40:e6:3c:5f:84:
4b:29:0f:fd:bc:72:20:e9:f7:5b:e9:c4:78:63:87:
94:d2:20:89:f4:e8:ef:8a:0c:76:d0:12:69:71:71:
0f:a6:28:5b:d9:c5:98:5a:19:41:20:d6:90:86:0d:
59:58:cc:33:7f:f5:15:17:4d:32:2d:49:d9:33:56:
44:9d:91:40:36:cf:e9:ae:f6:70:20:0d:25:fb:ed:
c3:9c:ae:9f:d9:c1:b5:6f:79:c1:6d:87:7c:45:c9:
2e:ee:eb:34:82:38:66:b3:9b:bd:5b:70:ea:af:f1:
fe:56:42:10:07:20:76:81:59:93:09:45:69:55:37:
c8:22:58:15:1e:a9:c6:90:98:ff:86:65:81:e1:99:
56:c3:3f:ad:60:b6:63:c6:8b:2e:e8:9d:22:c3:e1:
f3:67:ce:5b:3a:a2:f0:74:0d:a2:25:8e:db:18:0f:
c8:5e:50:5d:63:1a:56:1d:0c:e0:9e:c5:e3:ef:d9:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:57:94:7F:7E:4B:B0:26:D7:18:94:15:4C:CD:FB:C5:36:9C:41
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cb:5c:a5:a4:b6:2e:1b:9a:91:11:d6:c7:3b:55:24:60:e1:
f0:a4:96:a6:f3:90:9f:c9:b9:10:0f:6b:2c:1f:16:07:cb:ac:
bd:74:ee:8f:d6:8b:03:6e:ec:2b:b9:50:77:67:8a:a1:ef:de:
ec:59:a5:36:b9:58:82:e5:97:42:f9:5a:f2:9c:98:2a:ee:c1:
19:20:c9:fc:8f:3c:a6:59:4b:16:37:29:97:e7:7d:56:10:78:
36:f3:f8:ec:ed:b8:98:7f:49:fd:bc:35:75:7e:23:1a:cd:7d:
59:41:f8:8f:1a:52:d2:45:63:6f:77:bd:a3:d4:79:65:b3:33:
14:db:f0:c0:b7:26:f9:c5:10:ae:19:a3:e0:94:29:b3:88:be:
a6:ae:4d:74:5a:dc:80:82:fa:73:a3:b0:2d:6a:07:25:3e:30:
e4:f7:4e:1c:f3:f6:83:a2:b2:b9:e0:a3:fc:0c:b7:0d:76:f0:
4f:14:4c:4f:cc:99:35:b0:c1:b0:18:62:9c:4d:e9:57:52:27:
6a:09:7b:71:2b:6b:e0:9a:e0:c5:2b:07:fb:5c:e7:00:25:1e:
ba:a9:12:31:6e:04:75:9d:f1:75:06:69:cf:5b:27:7a:60:28:
52:8a:1a:95:8c:a9:51:18:43:86:3e:9f:89:32:2c:e6:3b:aa:
c8:bb:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:31:48 2025 by rpki-client