Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: s8sHyyYAuvk7wQU0iSrAReiuOwDQvYJc8+kf2+VLwQc=
Subject key identifier: 85:D6:1C:F7:D9:35:B4:87:49:94:7E:04:48:FF:70:15:A2:C8:A8:A0
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 01988BEAE8842452D39CF619AD402748CBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0935
Signing time: Fri 08 Aug 2025 23:01:24 +0000
Manifest this update: Fri 08 Aug 2025 23:01:24 +0000
Manifest next update: Sat 09 Aug 2025 23:01:24 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: 3HsEK4+Ia/5ZbZ01a+oAcm9LxBCzwpD2gAXNTKK1olc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:e8:84:24:52:d3:9c:f6:19:ad:40:27:48:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Aug 8 23:01:24 2025 GMT
Not After : Aug 9 23:01:24 2025 GMT
Subject: CN=85d61cf7d935b48749947e0448ff7015a2c8a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:19:82:a1:e0:1f:99:a3:46:2d:2b:1c:b5:
50:55:b9:63:14:af:2d:c4:8b:50:68:ca:c0:b4:5e:
34:95:e4:b0:23:a3:53:b6:a5:01:db:de:26:77:55:
1f:be:0f:f7:1f:fe:1e:24:aa:35:e5:b7:9a:ce:95:
93:44:5f:8b:44:e9:ee:14:40:1c:02:e7:47:a6:ee:
8d:b3:a2:e6:8a:45:cc:52:dc:fe:b0:48:85:13:1e:
ff:04:88:35:32:1e:c3:ce:0b:6e:0c:f5:c0:cf:b7:
3d:ef:1a:72:f0:1d:5f:dd:69:ad:c9:a4:c2:c4:90:
e9:d6:4d:4e:2a:42:11:4c:e7:0b:ad:c7:8e:f8:c9:
10:be:c1:32:ef:a3:05:75:11:48:b5:a0:3c:ae:28:
8d:8c:cc:09:c0:f1:24:14:57:38:51:f3:0b:03:69:
5c:ab:47:8e:1e:05:82:e1:ca:9d:f0:7f:6d:13:4d:
26:bb:3d:26:a3:8e:c6:8b:c7:c9:7e:c4:1b:ce:c5:
45:2a:67:88:06:6c:92:88:8b:2b:69:58:fe:ab:f3:
38:54:ce:79:4d:b4:58:1f:da:24:92:94:f9:75:cc:
b4:3f:ba:b5:b6:ad:cb:c6:3f:a2:b3:aa:da:e0:2f:
44:71:5b:fb:9b:c0:c0:a3:41:80:cd:d6:3d:96:1a:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:1C:F7:D9:35:B4:87:49:94:7E:04:48:FF:70:15:A2:C8:A8:A0
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:46:2a:8a:5a:a5:f3:99:69:ee:72:58:3e:b4:63:bd:ac:98:
98:3a:2b:dc:99:a8:b5:8b:cf:21:31:af:be:13:4b:e0:16:69:
92:d9:34:57:85:89:fe:5d:ba:a8:06:47:27:ce:bd:a9:cc:35:
0a:4c:c9:d2:b8:07:31:aa:63:99:0b:e5:ef:7e:56:bc:46:97:
70:d3:8e:62:18:23:84:a2:66:59:d0:4b:31:46:d0:9a:61:42:
b6:87:07:81:9e:64:e3:bd:88:7f:39:ab:2f:e7:85:ea:2a:42:
ff:d0:8c:26:15:f1:df:24:17:29:23:45:f5:22:13:6e:c8:4c:
ed:5f:94:44:44:58:58:6b:ce:52:5c:07:ff:2c:c8:05:ce:99:
11:b9:07:2e:b5:04:fb:d3:15:b0:08:0b:a5:9f:78:13:cc:16:
57:1c:d5:13:9e:80:d4:bc:bc:98:c6:c8:75:f8:4b:3e:fe:76:
60:87:de:35:a1:cb:db:12:9c:1c:f7:6f:9b:ab:31:06:7b:b9:
70:07:cb:bf:2a:60:43:1d:45:ea:e8:42:aa:1c:30:ee:e7:90:
a4:a8:79:e2:1f:2d:cb:94:ca:bf:d0:12:a4:d2:b6:e4:cf:a5:
61:8a:1a:db:e9:3c:31:87:21:59:20:14:87:4c:cf:20:89:b3:
5b:9d:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:51 2025 by rpki-client