Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: 87IFPB9XYvv+DDDlD5mIqJ6srLrkONHUGAbsutUGCBE=
Subject key identifier: 40:55:6D:FA:27:A8:71:43:45:81:F6:D5:4D:80:AA:2E:11:AF:9E:F4
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019895FFFB82876013530C3DE90B71B610C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 22:00:37 +0000
Manifest this update: Sun 10 Aug 2025 22:00:37 +0000
Manifest next update: Mon 11 Aug 2025 22:00:37 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: R1RlrXyM6uBGktUEoK5Z+3QsWknFuiClmsnMf3dBILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:fb:82:87:60:13:53:0c:3d:e9:0b:71:b6:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Aug 10 22:00:37 2025 GMT
Not After : Aug 11 22:00:37 2025 GMT
Subject: CN=40556dfa27a871434581f6d54d80aa2e11af9ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:9b:0e:70:2f:ae:ca:de:c6:1a:91:a2:fc:
ef:df:e1:99:8f:eb:d5:66:e7:99:45:69:fd:f9:d1:
3d:e9:ba:ad:25:a6:6e:ad:a2:c2:90:25:51:a9:92:
6e:c7:8c:04:c3:72:12:5d:9d:44:a6:ee:53:97:44:
0f:f8:07:78:0e:86:61:a4:d5:de:a0:96:0c:c6:f4:
9a:bc:03:7c:28:9d:c9:cd:90:0a:dd:52:7f:62:b6:
d5:c4:e2:c2:83:03:e4:65:81:65:a5:9e:ad:e9:de:
25:a9:74:61:e9:58:a9:08:f1:35:78:63:d8:2a:53:
36:ce:63:dc:3c:23:ca:b8:17:d4:0e:dd:13:c3:ac:
d3:74:2d:b3:0b:00:84:d8:03:34:aa:4f:24:e7:c7:
29:31:8e:e5:40:74:91:f6:b3:d6:ed:0e:c4:be:6a:
8f:cc:69:05:7d:54:1c:36:b9:5d:54:00:38:71:16:
3a:27:4f:fe:9a:a9:aa:87:30:b1:40:e0:db:a5:39:
a6:c3:ac:c5:dd:fa:d2:76:3d:79:48:e7:3a:a7:99:
bb:ba:f5:19:eb:13:c6:f5:94:a4:dd:e7:a0:6a:3e:
e7:7d:f3:01:97:30:de:42:a3:1e:2e:25:61:fd:a6:
8a:7e:f5:70:3a:ea:10:45:61:c9:c3:35:2d:87:90:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:6D:FA:27:A8:71:43:45:81:F6:D5:4D:80:AA:2E:11:AF:9E:F4
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:8e:72:83:d2:15:b9:5d:a4:a5:88:50:88:64:6e:0c:3f:
60:33:25:f5:db:ff:bf:f0:57:ce:6c:86:ca:1f:c1:a9:cc:9b:
db:ed:65:a8:5f:8e:3c:f0:b7:df:26:5b:44:e8:ee:b0:60:d7:
d2:37:96:60:f0:c0:b0:6d:5b:24:a1:11:78:64:60:be:70:8c:
73:99:bf:ed:71:eb:bd:af:bd:0b:d1:e1:02:74:1a:80:60:8e:
72:85:8e:c5:fb:a2:83:30:c6:3e:93:90:0a:45:0f:1a:a8:b9:
b3:7a:eb:7a:d7:40:98:d0:90:9a:2d:19:6d:59:2a:53:21:71:
d5:f1:d6:3f:c5:05:40:62:e7:a1:4d:e3:a6:e8:47:d4:be:d5:
21:ea:19:6e:b1:80:97:f5:cc:d1:2d:03:da:14:7a:7f:ca:4a:
4f:ef:db:af:17:e2:09:ab:e0:82:4d:1c:00:07:03:7c:a5:31:
6a:3e:8a:f5:10:5e:4f:ad:e0:1f:43:94:9a:2d:5a:fc:10:c9:
77:00:3d:41:96:49:a0:90:34:cb:3e:4f:aa:36:a7:19:a5:c6:
ab:0e:b9:0a:8e:b6:54:9c:b0:dd:a5:4a:2e:23:81:b6:b4:8c:
d4:52:94:5a:f7:7d:41:a3:a5:ba:f5:a3:6f:9f:9e:de:21:01:
5e:0e:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:51 2025 by rpki-client