Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: u2K3EtP9VeZaPyp9gOuJWHNx6sOh+sBjXqGLkCnXY5E=
Subject key identifier: 58:0E:FA:9F:B2:D3:2D:20:73:5D:AB:44:73:CD:52:1E:D6:8D:9F:45
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019922C3210C9324E0E6A1B2DB39D2A245A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 015B
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: GyOa5nu0ltMQdW/1z2Re4ePO+xOOsw3e+YsEbqOefbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:21:0c:93:24:e0:e6:a1:b2:db:39:d2:a2:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=580efa9fb2d32d20735dab4473cd521ed68d9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:2c:da:49:e1:ed:88:bc:27:7e:4b:c7:79:
65:e8:8d:d0:1a:b1:dd:82:b3:e9:40:a8:32:4e:4a:
5e:b5:52:91:76:c5:67:33:ce:6f:95:c1:31:17:94:
6d:90:2a:d5:19:9a:b4:5d:65:10:d2:8b:67:74:52:
3b:88:5c:19:29:c6:95:e8:2f:e6:8d:f6:f5:b6:9b:
dc:aa:38:6f:ac:3f:73:50:e0:20:ff:1e:c8:50:03:
4d:2a:d8:40:9d:05:81:5e:35:68:cb:af:a7:d1:b3:
db:ff:03:2e:e2:40:b7:86:6b:e6:bf:ca:41:fa:de:
c8:fe:7f:a3:3d:f7:ad:c7:50:b0:a7:72:fd:95:95:
10:ef:8d:26:a6:9d:cc:33:5c:dc:cf:ac:14:2e:b7:
39:af:91:67:a2:b6:ef:b3:f8:5b:42:c5:84:14:50:
07:47:7c:2d:89:9c:60:24:59:7b:8d:a7:03:0c:14:
b9:4d:84:96:b2:c7:a3:ad:f5:b7:20:ec:48:50:be:
72:b9:58:b1:cb:9c:d8:dd:12:80:3c:d6:79:21:fe:
f0:08:1a:94:2d:dd:8b:5b:bc:dd:ee:54:b1:2a:cb:
e1:40:0f:56:46:f1:1e:3d:c1:11:6b:7e:24:cd:7a:
1a:55:87:24:89:84:ab:0c:bd:c6:22:54:91:d5:fa:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:FA:9F:B2:D3:2D:20:73:5D:AB:44:73:CD:52:1E:D6:8D:9F:45
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:77:55:b3:01:00:cb:34:81:64:76:3d:7d:02:bf:67:cb:
4a:cd:3d:68:31:07:05:5d:43:1b:2b:3f:33:c4:10:2f:69:a2:
12:ce:1c:d8:e2:79:70:ed:06:ec:54:4b:54:f1:44:2d:df:2e:
e3:68:29:13:c2:7d:f3:42:a1:d1:e9:b6:7c:27:d7:50:7f:21:
08:3e:9a:8d:14:f3:83:e3:43:e6:60:5d:ce:72:48:a9:64:a1:
f0:56:41:bc:d9:c4:fe:29:be:c8:b1:a8:07:45:cf:d3:05:05:
c8:17:cd:88:6a:60:71:a6:c9:46:45:16:c6:e6:5f:b1:13:cf:
fc:0c:ed:46:2a:c5:c8:63:f1:f2:0c:31:65:88:fa:44:2d:9e:
bf:72:a5:85:d0:8f:fb:56:09:22:8c:f6:b9:ce:7c:8b:d5:27:
48:3c:d8:80:d2:26:f4:7e:35:76:63:ff:f5:11:dd:a2:a5:fb:
22:a3:7a:b6:ad:8d:71:41:bb:2b:58:cd:0a:1e:76:3b:99:07:
18:10:6f:89:5c:ac:d9:69:01:5e:a9:d8:76:5c:0e:29:00:1b:
30:0c:6b:15:64:82:df:51:82:ee:8b:f5:64:76:15:24:45:1d:
23:c2:4f:e5:3e:c1:b1:4f:ac:05:98:a5:94:32:11:9e:6c:4b:
fb:22:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client