Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: X/oKK/tEeiSLDS1IdnUcDKqQfPtz0WvVz0/8jHmG5Qc=
Subject key identifier: 7E:E7:E4:13:9C:D3:31:D8:23:75:0A:61:F6:48:C8:67:46:EE:25:28
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 01989F71533D074A4C2347D70FC47229E31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 0117
Signing time: Tue 12 Aug 2025 18:01:00 +0000
Manifest this update: Tue 12 Aug 2025 18:01:00 +0000
Manifest next update: Wed 13 Aug 2025 18:01:00 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: ionZrbqA5qiYVp521WSqP4Abyyr3UR2Q3tIn7qAum8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:53:3d:07:4a:4c:23:47:d7:0f:c4:72:29:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Aug 12 18:01:00 2025 GMT
Not After : Aug 13 18:01:00 2025 GMT
Subject: CN=7ee7e4139cd331d823750a61f648c86746ee2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:df:9d:2c:33:90:a5:a0:04:ae:8c:fa:54:
ec:2f:eb:9e:3f:03:08:92:59:24:b7:82:f3:f1:49:
53:2e:63:5e:15:25:e6:d8:29:6d:f2:e6:7a:b6:5d:
f1:04:66:b8:66:8d:5e:d2:0b:bf:26:04:63:14:06:
14:06:c1:d1:12:e4:9f:fb:a5:ae:04:a5:c9:3e:43:
6e:ff:94:5e:90:f6:16:27:d5:10:aa:ef:cd:9d:ef:
00:5d:bc:65:eb:5e:54:97:9f:29:01:81:6c:93:03:
b6:76:04:f4:04:f8:00:27:38:09:a1:df:7f:b6:0b:
74:62:0d:85:0e:86:b1:d1:34:5c:10:b9:8d:97:68:
02:c6:f3:fe:e3:cd:17:a2:85:9b:7f:17:9c:1e:9e:
68:9e:cf:b0:0d:a8:14:c4:20:b8:ed:2e:45:8a:0c:
e2:8f:11:d8:ce:26:d2:65:f2:94:4c:28:01:95:a2:
eb:5b:d4:00:ed:19:61:d8:17:33:55:38:5e:13:3c:
c1:b6:1a:0b:80:18:fd:12:0c:c1:c1:89:28:3b:1a:
0e:a6:9d:c1:8b:fb:63:36:f4:0e:1c:09:75:91:55:
fe:a9:fc:c9:24:b3:ea:61:6c:d7:63:72:60:47:34:
9e:7b:47:51:8e:ab:8d:7c:eb:6d:ad:38:ee:44:b2:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:E4:13:9C:D3:31:D8:23:75:0A:61:F6:48:C8:67:46:EE:25:28
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:db:fb:9c:6a:05:b1:c5:94:a4:0d:69:ce:db:46:17:68:
c1:88:21:f1:28:53:cd:b7:fd:3b:64:30:63:b8:1d:30:af:e0:
11:39:09:3c:5b:b6:f7:cd:ca:4b:71:29:0f:86:a8:4d:b2:a9:
f3:be:be:42:8d:c7:1d:14:76:95:7e:57:32:61:91:74:60:7d:
0a:20:7f:d5:06:21:93:06:18:fa:42:09:73:51:e1:d3:63:2d:
af:00:44:9e:f7:4c:cd:10:5f:ba:19:44:82:cb:7d:09:31:24:
ac:06:de:7f:b5:2e:07:83:9b:5f:46:b4:84:1f:34:46:5b:70:
f3:ff:04:f3:75:20:37:19:2b:99:4a:45:3d:cc:47:8a:15:a5:
24:36:d7:02:f6:35:37:d5:6b:4d:59:91:cb:f7:ec:51:ae:81:
e1:38:16:7f:9c:cc:a0:52:ea:64:1e:bb:c7:a3:64:96:d6:86:
05:01:d7:ac:33:3b:d3:42:c8:3a:ee:c1:41:79:bc:e7:4b:9d:
0c:90:98:d5:d8:ed:94:c8:3d:7c:5e:e6:a6:03:a9:e4:64:80:
ec:f8:f7:da:9c:74:05:95:c6:4f:2f:74:3d:65:fd:f4:b8:37:
70:e2:bc:f0:41:93:72:dd:e0:63:a1:13:03:99:0e:d9:60:6d:
ff:dd:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:39 2025 by rpki-client