Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: Ci4hsupjqFIMKB95QvZph7qT20tItKtZGFpJvK7v+t4=
Subject key identifier: 32:17:74:BA:99:A1:04:69:3C:75:1C:37:74:1A:D2:9B:97:C0:8A:52
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 0197CCF1926980539B172B2DB7522C6430A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: AA
Signing time: Wed 02 Jul 2025 21:01:13 +0000
Manifest this update: Wed 02 Jul 2025 21:01:13 +0000
Manifest next update: Thu 03 Jul 2025 21:01:13 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: ko6+9NwCxljPoi6KClzq8stWv9WMNF6TelIYE9ITMIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:92:69:80:53:9b:17:2b:2d:b7:52:2c:64:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Jul 2 21:01:13 2025 GMT
Not After : Jul 3 21:01:13 2025 GMT
Subject: CN=321774ba99a104693c751c37741ad29b97c08a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:6e:2a:0d:31:2d:9a:44:b2:bf:51:d8:17:
ba:60:7e:ae:2f:42:73:16:ef:73:14:07:51:99:7c:
cd:a5:e0:e5:d4:7a:eb:39:99:ce:12:5d:8f:db:51:
27:18:ed:a3:b4:d2:2e:9a:bd:59:69:f5:f1:f2:51:
1b:8f:a9:6c:7e:7c:81:47:35:98:6e:e4:72:97:50:
c0:67:6c:3b:22:f5:c8:ca:7e:1d:cb:a5:4e:7f:83:
9d:ec:b8:74:3b:4b:10:0d:3b:d1:17:84:ff:30:85:
12:b2:76:62:d7:3f:35:09:c4:0f:16:9d:45:97:ed:
f4:4c:35:a1:8d:19:ee:3f:c4:7c:9e:e4:0d:6c:14:
7a:73:77:0a:00:10:ab:be:24:34:15:7b:0b:2f:73:
54:c1:18:9c:f3:e1:34:08:47:48:1a:73:81:7d:88:
5e:f0:2a:2d:0e:13:71:0e:7d:5e:48:d3:0b:27:40:
66:ad:cc:16:53:2f:98:25:ba:65:c5:29:3a:51:99:
48:b1:55:d1:d3:bd:e5:a3:e1:f8:e7:3a:ea:f1:e9:
a2:2f:c6:34:08:3a:cc:b1:86:b6:51:e0:0f:91:92:
0b:04:b4:0b:04:87:1b:39:e8:3c:eb:8c:66:4b:34:
a7:01:f8:31:73:5a:db:ee:e1:94:11:38:dd:b5:87:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:74:BA:99:A1:04:69:3C:75:1C:37:74:1A:D2:9B:97:C0:8A:52
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5a:c3:54:01:97:6a:ba:a0:32:46:bf:c5:5c:f7:56:47:f2:
b1:6a:9a:47:9b:74:c8:4e:e3:0c:db:12:02:d9:77:c5:ca:38:
45:72:53:7e:c2:ef:2b:b3:de:ac:6b:b9:1b:59:49:25:5c:c9:
16:a0:ba:dc:63:65:a1:a3:36:59:74:d1:08:5c:27:73:3d:f3:
b2:65:1a:da:4f:6f:00:36:64:9c:87:3c:02:1f:cc:ad:bc:9d:
e2:5a:f8:0a:4d:08:4b:73:9b:d1:a4:cb:a6:48:0d:e0:94:82:
7b:5e:e1:69:eb:4d:82:68:74:22:71:53:22:9f:2b:0b:c5:43:
88:74:77:0a:26:f6:81:75:0c:28:33:a1:f9:8e:99:eb:87:fa:
d8:a5:c3:84:83:f1:7a:0b:a4:ac:89:80:80:c9:5e:f5:6e:73:
02:c9:10:7e:c4:43:1c:3b:f9:c4:84:24:13:34:60:fd:d9:a4:
20:6a:fa:fc:40:66:6e:d6:57:55:97:9e:36:a3:bf:97:40:47:
00:10:e5:d8:6b:b8:ff:65:db:92:65:48:a5:30:90:d2:84:63:
cb:63:86:12:46:67:a0:6c:93:07:47:0f:c4:38:d8:68:5c:1e:
c5:c1:ce:5b:72:40:f6:9a:a6:7b:60:43:10:9a:18:14:52:83:
b8:fd:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:07 2025 by rpki-client