Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: A8Ex2Tg7Lt5tSneF1aIsFKP44n+QxDRSzu+WFhAZ5+4=
Subject key identifier: 27:42:A8:7E:FD:84:9D:A7:A7:9D:F1:49:63:62:7A:F8:13:2C:C8:70
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 01977007BD821E4E4652135C8D90BCF56D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 08A2
Signing time: Sat 14 Jun 2025 20:00:44 +0000
Manifest this update: Sat 14 Jun 2025 20:00:44 +0000
Manifest next update: Sun 15 Jun 2025 20:00:44 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: USYDzESFYcSP1uMkOuzFJd3nhG4I1bfBvQXmUpdBamc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:bd:82:1e:4e:46:52:13:5c:8d:90:bc:f5:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Jun 14 20:00:44 2025 GMT
Not After : Jun 15 20:00:44 2025 GMT
Subject: CN=2742a87efd849da7a79df14963627af8132cc870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:35:24:71:74:58:81:8d:38:e1:ab:af:b0:
50:1c:47:a1:ac:c7:57:8b:f8:be:70:d6:65:7d:db:
ca:5e:24:8c:9b:d8:a4:eb:b9:21:8d:2a:2a:9f:b6:
34:53:c2:0c:32:a8:00:d0:e9:e0:f9:dc:df:da:4d:
1f:b4:4c:35:e4:d8:f2:1f:74:3c:b3:f2:a9:84:71:
87:fd:e8:13:03:85:a0:60:4d:6e:22:0d:40:8d:7b:
46:a6:ac:34:76:dd:73:6f:c6:78:1d:1a:09:8e:bc:
f4:36:88:73:2e:5f:d7:a5:6d:bc:55:d7:8b:f3:4c:
95:ce:42:45:ca:e4:ba:57:81:18:e5:40:31:b2:ef:
b1:49:ca:e0:be:be:ce:d3:d3:9a:06:34:99:2a:7a:
02:5e:c1:94:6f:1e:f9:57:44:8e:23:dd:6e:9e:23:
ee:72:a3:58:b4:75:18:75:f5:a6:8f:91:ba:1d:8b:
57:50:e3:41:38:92:08:99:09:29:cd:e4:81:d6:a9:
6a:45:6d:48:90:44:4c:d1:48:3f:23:08:0a:f7:47:
a4:1f:20:c2:a8:f3:31:33:7c:cd:f6:d7:90:67:60:
f0:56:8f:02:02:da:82:60:f8:35:97:72:47:d9:c5:
1f:da:f2:8f:60:bb:28:3f:06:58:19:78:6b:5f:1e:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:A8:7E:FD:84:9D:A7:A7:9D:F1:49:63:62:7A:F8:13:2C:C8:70
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:64:ae:17:2b:52:b3:de:a3:9f:d0:b4:fc:2b:de:e7:5c:
8d:26:93:c0:8d:5c:2d:4c:c7:60:b8:2d:aa:f3:d1:a7:8c:c9:
d9:12:2d:f3:70:be:c8:f1:e0:e1:5a:8d:55:ca:d5:42:28:10:
0f:6b:01:ab:53:ef:8c:de:6e:1f:cb:ee:42:e9:4c:1f:fb:27:
d6:2e:25:f7:b2:95:69:82:e9:03:91:f1:37:1f:92:eb:e2:3e:
85:e8:65:82:c9:c5:09:a8:69:8d:00:1d:10:73:ac:a8:b7:2d:
56:3d:4a:f7:dc:a0:5a:ae:0f:00:c1:42:ca:15:cc:a1:c5:ca:
63:bb:c1:83:9b:9d:ac:02:01:fa:e6:c7:8d:63:5e:ec:3c:ea:
9b:f4:59:18:e8:fa:fd:1b:6f:4d:28:fc:95:48:40:31:a8:4c:
d2:51:62:29:a3:c9:82:8d:de:4c:5a:a2:e0:27:96:08:8e:dd:
dd:78:fa:3c:7d:d5:ec:bd:90:e4:43:46:c0:e7:99:9f:bd:74:
31:7a:d5:ab:f7:77:4d:5e:b3:fe:9b:a9:71:d0:38:70:6f:93:
ae:e2:5d:e8:bd:96:72:0a:0c:9c:93:58:0d:6b:ee:f1:4e:74:
ee:d5:65:b9:27:d3:e1:c0:49:6f:41:dc:db:0f:ab:f3:e7:32:
2b:5a:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:50 2025 by rpki-client