Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: JswwC88blk3Jqw0RALzvYwvCxd5s77+x9czRJVhjEGU=
Subject key identifier: A5:27:B0:98:C8:F3:E5:09:91:75:14:80:BE:13:52:7A:8E:B6:F6:D5
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 01976D744C4EE3B22DE020EACB7621E55FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 03D3
Signing time: Sat 14 Jun 2025 08:00:27 +0000
Manifest this update: Sat 14 Jun 2025 08:00:27 +0000
Manifest next update: Sun 15 Jun 2025 08:00:27 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: 72FbGYXlzi6Q3VNoTt0TKLb4Wp5lTbiYb4kG6wICw+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4c:4e:e3:b2:2d:e0:20:ea:cb:76:21:e5:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Jun 14 08:00:27 2025 GMT
Not After : Jun 15 08:00:27 2025 GMT
Subject: CN=a527b098c8f3e50991751480be13527a8eb6f6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:e6:1c:56:be:9a:8e:a0:a9:a0:01:c5:fd:
af:ba:ed:1a:c3:85:fc:a1:89:35:0e:bf:a4:a3:4f:
3f:64:c5:b9:f0:30:07:7e:60:eb:80:9d:58:3b:55:
36:ae:bd:68:d8:a7:97:14:2e:98:05:9e:bc:3c:4b:
e2:b8:a0:91:00:bd:5c:68:f3:21:b2:1d:f0:50:58:
de:d3:54:eb:58:85:9e:6c:93:0f:46:a1:75:ac:68:
bb:b3:81:68:5d:b3:e4:75:43:24:43:da:1b:1c:c2:
4e:46:2f:c6:bf:96:d3:e9:22:0f:e3:10:2b:40:0c:
b2:e1:8f:b0:fc:49:13:be:5f:59:d8:93:eb:2e:8d:
3c:e2:98:35:9d:d0:c6:e9:4c:20:c8:03:b3:1f:3e:
3f:ce:24:46:5e:c0:26:12:44:00:7f:11:d0:fa:85:
ff:43:ac:5e:57:ca:a9:a9:29:4e:67:71:f5:38:25:
18:82:50:14:c4:d6:59:68:55:10:9a:50:12:ea:4c:
2f:24:79:dd:46:94:42:56:09:a8:31:5e:99:a8:b0:
a5:c2:35:04:cb:5d:bc:66:a6:7a:8a:e7:da:5f:8c:
b0:ae:9d:a5:5c:71:fe:83:ae:b6:0d:38:85:bc:7a:
dd:88:f0:37:8d:17:8d:71:81:51:d1:53:fa:a9:4b:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:B0:98:C8:F3:E5:09:91:75:14:80:BE:13:52:7A:8E:B6:F6:D5
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c5:b6:00:f7:83:f3:f9:a6:41:56:9b:cf:57:dc:ec:6f:a2:
a5:72:5b:0b:75:4b:27:b0:01:ed:82:b1:a0:82:d0:f6:45:5a:
d0:98:21:8d:6e:3a:07:be:0d:66:26:73:e3:51:6a:54:5e:8b:
55:fc:4a:01:9d:ec:0c:6e:e5:ee:2c:8b:4c:2a:57:eb:61:9e:
19:76:0b:71:dd:58:51:b3:a8:f6:5d:af:eb:26:e8:f3:5f:e5:
6c:62:ca:b8:d5:6e:7f:b3:7a:73:b7:77:3e:91:f2:69:4a:ca:
f8:f8:9f:4a:86:e1:87:eb:63:6d:7e:52:8f:11:e0:5c:1a:72:
d1:ee:75:1b:fe:8c:5d:1b:94:78:e2:c2:df:b1:eb:69:c2:e5:
36:4d:bd:43:60:7c:74:2a:3c:26:5d:f6:bf:3d:7e:9f:16:35:
d2:21:17:95:5e:3b:17:a9:ea:bd:33:50:df:6d:29:df:3c:1e:
78:b4:d0:35:bf:95:dd:49:b5:7a:4f:8a:0f:cc:89:45:e9:5f:
40:3a:e0:6d:53:5d:b6:f3:da:99:68:f7:5b:91:7b:5b:56:f8:
9f:63:6a:1c:25:6b:55:e8:6c:d9:11:5a:40:a3:29:3f:79:9b:
39:20:69:b9:ef:ca:50:b6:d7:54:8f:48:95:f5:f4:89:4c:4d:
0b:70:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:50 2025 by rpki-client