Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: zm479J5hnyajZG3ekK8ebH45asrWJIiRYxoz9Lm6VbE=
Subject key identifier: 6A:0A:DC:85:85:6F:3B:7C:77:07:01:E8:53:90:13:9C:AB:43:0D:D4
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019768BBC0D281B12FD041D9F557754D3612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0D2D
Signing time: Fri 13 Jun 2025 10:00:24 +0000
Manifest this update: Fri 13 Jun 2025 10:00:24 +0000
Manifest next update: Sat 14 Jun 2025 10:00:24 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: 8B6wvVQMnH4s8R1yeDr9eLmuGYSiNWgm5mJETwwJKCo=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c0:d2:81:b1:2f:d0:41:d9:f5:57:75:4d:36:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jun 13 10:00:24 2025 GMT
Not After : Jun 14 10:00:24 2025 GMT
Subject: CN=6a0adc85856f3b7c770701e85390139cab430dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:ba:e6:4b:50:80:53:19:ca:ad:d5:14:3b:
1c:8e:b0:96:26:8c:6e:03:96:11:22:03:0b:02:3f:
7d:40:34:a4:4f:58:45:e2:31:a1:cf:19:6b:44:6d:
d3:bc:c6:98:1f:14:f9:0b:d2:d2:65:d7:b1:34:c8:
fb:44:8d:9d:40:0f:8a:f1:7e:ae:46:75:e5:09:dd:
ab:a0:15:72:b3:7a:95:75:7f:47:54:fb:46:6e:c0:
fd:0a:9a:cb:65:02:11:25:79:bb:8a:d3:e1:32:42:
9b:40:0a:0f:0a:37:9e:2b:1f:3d:fb:de:2c:b1:bd:
28:96:bc:27:76:39:9f:2d:85:e7:9f:4c:11:af:20:
5e:79:a9:04:50:f4:f6:35:50:28:d3:d3:90:5c:37:
b0:65:9b:85:56:2c:3c:74:84:ae:94:1f:09:bb:a0:
54:c8:44:f5:78:46:0e:b5:41:95:ea:55:ab:d1:c9:
d7:90:77:90:82:68:0a:57:69:d5:96:5b:c9:d4:5b:
db:cf:8c:5d:28:73:8c:64:0c:3d:cf:fb:72:62:15:
55:d5:d5:8e:19:87:c5:21:82:6d:35:f8:1e:9e:c9:
b1:d1:47:66:e2:f7:61:52:ed:0f:6e:5b:b0:87:2d:
49:4b:ca:5d:a3:00:93:cd:fe:ff:e5:3f:ae:87:7e:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:DC:85:85:6F:3B:7C:77:07:01:E8:53:90:13:9C:AB:43:0D:D4
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:74:a0:04:3f:a0:c0:5e:0e:9c:39:5e:c2:22:ab:19:86:
7f:e7:f6:45:2b:2c:11:b7:d3:81:7f:de:47:a9:5c:8b:a1:a5:
2f:74:70:fc:8b:76:a6:ad:25:8b:68:30:ab:b0:1e:ce:e2:2d:
10:07:8d:23:3b:df:58:60:e2:79:e7:41:8d:66:23:db:b5:1c:
17:3e:10:4b:d0:5b:88:42:8f:ec:86:55:0f:09:54:96:3c:57:
23:7f:dd:b6:0d:20:d9:ed:19:7c:be:3c:75:a4:84:22:ba:3b:
c7:60:05:73:8e:a7:6c:75:fd:24:86:cd:bb:63:48:3a:16:24:
eb:a6:96:aa:e1:51:10:9b:81:c6:0d:da:30:c8:df:cb:a5:cd:
3a:30:ac:28:5b:db:62:51:b3:84:49:1d:9d:c2:92:5f:96:98:
ab:81:05:57:f9:f1:e2:06:46:61:b4:b8:94:ce:80:62:8f:da:
a7:95:25:4c:e8:53:4c:2b:ff:55:b4:d1:4c:bd:44:f0:bc:17:
10:e1:0a:b1:85:46:dc:2b:6e:61:01:7d:d4:e9:7e:5c:85:04:
70:02:93:9f:80:50:9c:37:42:c6:71:05:37:74:73:00:ff:fc:
dc:48:54:7e:dd:8f:13:b3:ba:40:3a:9c:14:cd:ba:da:f7:c5:
6f:26:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:11:14 2025 by rpki-client