Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: 6u9qzCoCicpDWlGLQYiORuURV3aaIXt48ZcH+h0Czmc=
Subject key identifier: E3:8D:A8:7F:BC:9B:B4:BC:13:F7:6A:41:90:38:12:45:84:93:90:A1
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019892C920D392E3B30BCB85E78FA87932C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0956
Signing time: Sun 10 Aug 2025 07:01:51 +0000
Manifest this update: Sun 10 Aug 2025 07:01:51 +0000
Manifest next update: Mon 11 Aug 2025 07:01:51 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: aXrRPBxeHF4OVcQnJgdJx64tCT3lZoRlaODYiN6xEmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:20:d3:92:e3:b3:0b:cb:85:e7:8f:a8:79:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Aug 10 07:01:51 2025 GMT
Not After : Aug 11 07:01:51 2025 GMT
Subject: CN=e38da87fbc9bb4bc13f76a4190381245849390a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:e4:55:dd:58:75:4a:fd:20:3a:cd:0c:0d:
78:9c:6a:01:4b:ef:78:70:32:c0:64:c9:b0:b9:77:
ff:e3:76:fa:e7:4b:34:95:b5:10:98:83:48:16:fa:
d1:0f:be:df:17:9f:18:fb:22:a4:09:a1:76:4f:f9:
0c:6a:63:b4:e6:5e:12:d5:bf:c4:43:b6:83:f8:db:
dc:4e:d3:1c:ed:93:01:5d:2a:a6:20:c5:20:d0:fa:
86:fe:31:65:87:f3:e2:10:67:5a:de:11:55:80:1e:
84:68:0b:19:fa:30:0d:72:5f:89:b6:1e:75:e7:da:
04:24:63:04:f1:a2:3a:92:6b:88:e0:f8:53:39:97:
94:cc:78:7d:84:fd:67:e4:ae:66:32:c2:73:aa:41:
19:3e:db:6d:30:af:93:ba:40:cd:0b:d8:41:1d:a5:
c5:6e:fc:75:a9:4c:e7:34:7f:5e:73:bc:fe:12:cc:
ab:a9:af:f2:8e:87:47:e7:1b:7e:ad:45:68:ad:5a:
35:04:87:2a:45:99:4a:2d:ca:53:6d:a8:32:29:c7:
23:78:4a:19:1b:49:eb:03:f3:c3:b3:73:ac:87:2b:
69:b3:fd:3f:9b:3f:38:ee:b2:cc:3f:06:2d:9a:d1:
18:19:4e:59:87:ad:31:fc:84:e2:ee:c1:79:e3:bd:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:A8:7F:BC:9B:B4:BC:13:F7:6A:41:90:38:12:45:84:93:90:A1
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:b1:6e:3c:72:5b:ee:c3:b0:1f:92:fa:1b:9d:dc:1c:c6:
4d:4d:21:8f:b7:2a:5d:82:08:ca:7e:e7:11:6c:98:e3:d8:1e:
93:9a:85:5e:22:27:dc:ac:f0:a3:14:17:20:d2:37:65:d2:a6:
e7:ac:52:ee:e6:a8:89:99:80:90:a0:23:ce:ad:07:72:17:40:
98:84:a4:fc:dc:92:ad:1e:90:bb:97:06:3d:68:6a:28:0d:2d:
45:e5:bf:cd:eb:02:29:49:12:83:24:a3:70:8e:bf:49:5d:68:
05:ba:c7:76:3f:b2:94:a0:41:ba:bb:1e:ed:bf:e4:63:30:31:
59:49:70:95:db:39:a6:74:84:7b:6a:bc:78:21:cf:b6:56:de:
0d:da:58:fa:af:61:8d:52:71:70:aa:a1:7e:ab:f5:8e:8e:e9:
e1:e4:55:df:18:b9:9e:9b:95:ac:0b:b7:a1:93:40:94:29:5d:
b9:2d:8a:a6:1c:57:ed:7b:c6:9b:9f:72:41:3c:c2:7b:b7:52:
f0:02:65:53:7f:03:25:fb:1d:43:c4:ed:da:69:d2:48:9b:64:
b3:21:70:10:66:6d:40:be:45:ce:1b:d8:98:fa:e3:c9:69:c7:
58:02:83:ff:e7:62:43:99:b1:17:f7:75:61:d1:93:c3:12:3b:
b0:fe:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:49 2025 by rpki-client