Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: rTrleE3NrD0LaYh3wGMUFmF/dBbIR/S8yHuWRePfXXU=
Subject key identifier: 1A:69:4E:D8:ED:BD:05:55:B5:82:45:47:FB:3B:33:94:9E:04:B5:27
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01988CFE294D0DA4635435699E724728006C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 073A
Signing time: Sat 09 Aug 2025 04:02:03 +0000
Manifest this update: Sat 09 Aug 2025 04:02:03 +0000
Manifest next update: Sun 10 Aug 2025 04:02:03 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: wdz8maXl4ey2RRXrgb9Au1hS76DqT7UaDlsbcn6YyYQ=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:29:4d:0d:a4:63:54:35:69:9e:72:47:28:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Aug 9 04:02:03 2025 GMT
Not After : Aug 10 04:02:03 2025 GMT
Subject: CN=1a694ed8edbd0555b5824547fb3b33949e04b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:d0:ad:75:bd:19:4f:35:c5:12:7a:c0:40:
8e:3b:db:c5:1d:3a:7d:8f:66:78:62:e8:50:00:5d:
ec:22:55:66:bd:94:0e:f1:71:34:22:25:59:03:86:
6d:e3:1f:4c:91:29:f7:92:08:5a:e6:5c:79:ad:2d:
78:c2:58:4e:ab:d7:f2:38:61:04:4c:4c:9a:ce:d2:
e6:32:68:e0:2b:cd:02:f1:3a:10:ba:c7:0c:14:3d:
7a:ef:f3:73:e4:b3:86:ac:e5:05:b9:55:b2:6b:88:
e3:22:4d:84:84:ae:c8:c5:f7:01:c8:22:05:81:0f:
df:50:4a:ad:72:77:66:4c:bb:10:9f:80:d1:7f:57:
26:bd:68:47:c4:22:c6:73:83:e3:ec:b9:d3:b3:2d:
5c:bb:98:b9:5a:b5:54:0b:5b:e6:32:60:7b:0e:a9:
44:96:c8:8b:3b:c0:9f:9d:8d:d9:31:54:c0:85:42:
62:f5:25:88:ef:66:fd:97:f4:f9:d6:6b:05:4f:02:
04:88:89:a4:50:0e:ff:3d:c1:dc:74:df:c7:08:ee:
02:f7:49:71:25:dc:08:23:b4:92:90:0e:1c:90:50:
fc:ef:5a:c0:48:da:9d:52:25:27:8b:e2:61:08:d4:
b8:60:2a:a6:19:59:4b:39:3b:27:d3:be:fa:a0:b4:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:4E:D8:ED:BD:05:55:B5:82:45:47:FB:3B:33:94:9E:04:B5:27
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:1b:da:e5:06:93:70:c1:07:65:ff:f5:84:77:2e:f9:70:
28:fd:bc:15:d1:ff:42:43:27:27:07:74:20:00:ec:85:a1:87:
d4:c9:55:4f:b2:3e:38:87:64:47:3b:d7:89:62:a5:2d:3a:60:
c7:c8:3a:5a:b5:e3:94:7e:f2:19:43:ea:17:d5:94:85:b6:35:
f0:58:47:4d:6e:2a:cb:cc:95:0e:14:b6:ce:19:01:b9:0a:44:
23:31:90:55:ad:5d:57:09:b4:ba:5d:fb:0f:29:b3:5d:f0:1e:
c2:8e:90:73:8a:3e:d8:3f:27:c0:ec:1e:55:77:b2:36:18:1e:
e5:07:e8:aa:7c:07:ba:ba:6e:ba:fb:21:b1:6a:3d:19:d6:c0:
b4:b5:7e:db:66:ff:2d:c3:44:17:e9:aa:e7:91:e3:f9:66:03:
34:f6:6c:80:91:fb:e9:eb:e0:fd:32:f8:61:38:be:df:47:32:
d3:cd:42:fb:71:74:6b:2a:40:33:2e:af:f0:f3:2a:b3:32:a9:
43:b7:ba:06:2d:4c:37:7f:42:e1:59:0d:5b:69:c4:b2:a0:fb:
5f:7d:36:f9:87:0e:e1:df:9e:97:4d:55:9c:a0:b5:c0:92:d1:
fe:0f:41:ac:ac:69:1c:25:9c:c6:cc:5f:98:c0:68:20:6f:45:
c4:3d:d0:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiM/ilNDaRjVDVpnnJHKABsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjUwODA5MDQwMjAzWhcNMjUwODEwMDQwMjAzWjAzMTEwLwYDVQQD
EygxYTY5NGVkOGVkYmQwNTU1YjU4MjQ1NDdmYjNiMzM5NDllMDRiNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5/QrXW9GU81xRJ6wECOO9vFHTp9
j2Z4YuhQAF3sIlVmvZQO8XE0IiVZA4Zt4x9MkSn3kgha5lx5rS14wlhOq9fyOGEE
TEyaztLmMmjgK80C8ToQuscMFD167/Nz5LOGrOUFuVWya4jjIk2EhK7IxfcByCIF
gQ/fUEqtcndmTLsQn4DRf1cmvWhHxCLGc4Pj7LnTsy1cu5i5WrVUC1vmMmB7DqlE
lsiLO8CfnY3ZMVTAhUJi9SWI72b9l/T51msFTwIEiImkUA7/PcHcdN/HCO4C90lx
JdwII7SSkA4ckFD871rASNqdUiUni+JhCNS4YCqmGVlLOTsn0776oLQ6uQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBppTtjtvQVVtYJFR/s7M5SeBLUnMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbkb
2uUGk3DBB2X/9YR3LvlwKP28FdH/QkMnJwd0IADshaGH1MlVT7I+OIdkRzvXiWKl
LTpgx8g6WrXjlH7yGUPqF9WUhbY18FhHTW4qy8yVDhS2zhkBuQpEIzGQVa1dVwm0
ul37DymzXfAewo6Qc4o+2D8nwOweVXeyNhge5QfoqnwHurpuuvshsWo9GdbAtLV+
22b/LcNEF+mq55Hj+WYDNPZsgJH76evg/TL4YTi+30cy081C+3F0aypAMy6v8PMq
szKpQ7e6Bi1MN39C4VkNW2nEsqD7X302+YcO4d+el01VnKC1wJLR/g9BrKxpHCWc
xsxfmMBoIG9FxD3QFw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:58 2025 by rpki-client