Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: mlZreuKWp+tx56vNOUAt09RD0znwLXL2EOt1+0ets0s=
Subject key identifier: 51:7C:0F:39:43:86:14:CD:69:CE:AE:F2:B3:5D:23:A5:26:68:A5:C9
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 0197703EE56E7FED269103DFE3E3DFC7FCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 7A
Signing time: Sat 14 Jun 2025 21:00:59 +0000
Manifest this update: Sat 14 Jun 2025 21:00:59 +0000
Manifest next update: Sun 15 Jun 2025 21:00:59 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: XpSNUTCQjMk/kHHNeCydJtE4Kh9ztR7xkeidWkdlwMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:e5:6e:7f:ed:26:91:03:df:e3:e3:df:c7:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Jun 14 21:00:59 2025 GMT
Not After : Jun 15 21:00:59 2025 GMT
Subject: CN=517c0f39438614cd69ceaef2b35d23a52668a5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:af:31:d9:d5:5a:a7:45:92:d8:26:8c:c9:
f8:36:61:46:9e:ac:a3:8c:7d:34:83:9f:0b:78:3b:
b3:41:af:6e:fd:36:a8:00:5f:ef:76:fd:d1:b4:c0:
97:cd:6b:de:4e:7a:3f:25:3f:d1:61:6d:ab:f6:73:
a8:69:7d:09:d7:50:4a:d7:65:1a:7e:2d:9f:af:ab:
1d:b8:2b:e7:2d:1b:e9:2c:7c:f0:a6:47:9e:4f:52:
92:55:31:b3:32:da:b8:19:c0:8f:19:18:c1:ca:a7:
8a:e6:f3:9e:ee:69:d9:88:c4:5c:8f:2f:d1:98:9a:
7c:cd:1b:5c:46:cc:07:f1:61:5b:b2:e3:e2:b6:a0:
31:ac:5c:38:98:1d:96:01:2d:3a:c1:c2:c3:bc:e6:
f3:9f:ef:0b:17:ce:a2:1d:65:aa:f7:fd:23:fe:09:
00:0c:cf:51:bc:fc:66:f0:a6:8f:59:ca:22:0d:d6:
fd:1a:a4:f9:d2:74:99:dd:18:dd:86:13:8d:ef:ff:
82:9f:0f:a7:b9:bc:61:16:24:b2:78:53:d4:f2:32:
18:42:fc:20:e7:e2:86:37:a8:7f:5b:88:b7:b6:12:
ca:79:f9:07:ea:47:90:7d:c4:63:c2:8c:3b:8f:b2:
a6:86:8b:9e:99:6c:25:b6:83:3e:b1:d7:08:77:2c:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:0F:39:43:86:14:CD:69:CE:AE:F2:B3:5D:23:A5:26:68:A5:C9
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:1f:7b:84:89:fa:01:f2:5b:a3:60:97:16:89:b5:45:9f:
12:30:94:89:74:d7:69:10:1c:25:ef:11:32:0c:59:9a:66:ff:
57:86:d9:02:6f:58:bf:d1:64:a3:33:c6:3b:17:f8:8f:36:95:
94:ed:6a:d6:31:44:7b:89:be:7b:f3:e1:f0:7e:3e:9b:a3:3e:
b3:e2:c2:fd:59:dd:48:a7:f9:fd:4f:49:0b:10:86:05:cf:8d:
a2:b6:10:f1:26:4e:e0:8e:27:18:4f:36:ef:4c:1d:2d:60:df:
83:1d:c9:25:d5:9a:78:14:4c:fc:1f:c7:ab:05:ac:dd:a4:cf:
9d:90:bc:0d:1a:62:8b:f9:25:95:75:a4:1e:f8:fa:81:a5:04:
17:6d:e5:50:ec:d2:86:57:f0:8f:1e:e2:93:20:dd:c4:86:6f:
9c:d8:26:cf:18:d6:82:b2:c4:01:7f:01:93:72:d8:73:41:ea:
52:86:d8:cd:7d:4f:f2:53:e1:59:d6:32:aa:f6:a0:0e:33:d8:
ce:bc:0d:2f:48:8a:e1:00:8f:17:84:21:6b:60:f4:fd:8c:f0:
5a:f9:01:48:49:ab:5a:fd:75:6f:5c:da:2a:39:90:f5:65:1f:
70:c3:47:5d:ae:df:c4:7f:59:26:b7:3c:f9:af:6a:06:03:4a:
2d:fa:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:41 2025 by rpki-client